Ground Floor·23 min
Yaron Avital
Examines how permissive GitHub Actions tokens and unpinnable third-party actions expose CI pipelines to compromise.
supply-chainbuildopen-source+2
Ground Floor BSidesLV 2023
Las Vegas, USA · August 2023 · 11 talks
Ground Floor talks from BSides Las Vegas 2023.
1–11 of 11 talks
Ground Floor·54 min
Cat Self · Kate Esprit
Shows how CTI and red development combine to emulate a Latin American threat actor using ATT&CK techniques.
attackintelligencedetection+2
Ground Floor·51 min
Jayson Grace · Adam Bradbury
Shows how a purple team pairs threat intelligence with offensive testing to validate detections against real adversary playbooks.
detectionintelligenceteam+2
Ground Floor·46 min
Vanessa Redman
Shows negotiation tactics that help security staff win leadership support for better decisions without relying on fear.
managementriskteam+2
Ground Floor·25 min
Neerja Sonawane · Kiran Shirali
Shows how eBay replaced a costly third-party SIEM with open-source Kafka, Flink and Hadoop for near real-time detection.
security-operationsthreat-detectionopen-source+2
Ground Floor·41 min
Matt Scheurer
Traces the origins of phone phreaking and early hacking, showing vintage telephone hardware and how it connects to modern threats.
socialhistorytelephony+2
Ground Floor·46 min
Josh Bressers
Uses Star Trek: The Next Generation episodes to map fictional security incidents to ATT&CK and draw practical lessons.
threatattackframework+1
Ground Floor·47 min
Zach Wasserman
Shows how to manage detection rules as code in Git using osquery, Fleet, and Matano with reviewed pull requests.
threat-detectionopen-sourcesecurity-operations+2
Ground Floor·34 min
Sara Perez
Shows how AWS Organizations SCPs, permission boundaries and EventBridge-triggered Lambda checks let engineers manage IAM safely.
cloudidentityaws+2
Ground Floor·25 min
Christina Liu
Explains how personal data gets re-identified and gives practical steps for building privacy into software from the start.
privacyriskengineering+2
Ground Floor·17 min
Brent Harrell · Garet Stroup
Presents a capability maturity model that helps red teams gauge readiness, plan growth, and report progress to leadership.
teammanagementframework+2