Talks·43 min
Ttheveii0x · Jonas Eichinger
Walks through static analysis, debugging and emulation of suspicious PE files and shellcode, then links the findings to threat intelligence.
malware-analysisreverse-engineeringwindows+1
Talks CC9
Mesa, AZ, USA · February 2021 · 35 talks
Talks from CactusCon 9 (2021).
Filters+
1–24 of 34 talks / 35
Talks·8 min
Ankur Chowdhary
Explains how anomaly detection models are applied to network and host logs to spot slow-moving APT activity.
threat-detectionmachine-learningnetwork+2
Talks·49 min
Ankur Chowdhary
Examines whether machine learning detectors can spot multi-stage APT intrusions, using a new packet-capture dataset built for testing.
machine-learningthreat-detectionai+2
Talks·1 hr 4 min
Wraps up the virtual CactusCon 9 with staff thanks, attendance figures, finances, and giveaways.
virtuallessons-learnedteam+1
Talks·11 min
Recaps day one of the virtual conference, covering streaming issues, sponsor thanks, CTF giveaways and the community after-party.
virtualchallengediscussion
Talks·47 min
Mark Kirschenbaum
Shows how a power analysis side channel attack can recover an AES bootloader key from a Microchip microcontroller.
hardwareembeddedreverse-engineering+2
Talks·9 min
Mark Kirschenbaum
Follows up on a power analysis side channel attack with answers on chip hardening, learning hardware analysis, and tools.
hardwareembeddeddevice+1
Talks·28 min
Ryan Dinnan · Jacob Abraham · Joshua Pardhe · Megi Bashir
Explains how student researchers run scam-baiting calls, from building an isolated setup and persona to collecting intelligence.
socialintelligencemalware-analysis+2
Talks·48 min
Gavin Klondike
Surveys how AI tools help attackers and how machine learning models can be evaded, poisoned or leaked.
aimachine-learningattack+2
Talks·57 min
Jorge Orchilles
Guides attendees through a hands-on purple team exercise that pairs adversary emulation with blue team detection.
practicalframeworkdetection+3
Talks·20 min
K "Turb0Yoda" Singh
Shows how to set up a virtual CAN bus lab and inject packets into a simulated car without owning a vehicle.
embeddednetworkintroduction+2
Talks·46 min
Eva Galperin
Explains how the EFF's Threat Lab studies surveillance malware and why security workers should push back on stalkerware.
privacythreatmalware-analysis+1
Talks·18 min
Anthony Radzykewycz · James Green
Shows how a project packages VulnHub vulnerable machines as Vagrant boxes so newcomers can start practicing quickly.
learningvulnerabilitiesopen-source+2
Talks·11 min
RedHatAugust · Thefeesh7
Shows how a Vagrant-based project spins up VulnHub vulnerable machines in VirtualBox for offensive security practice.
vulnerabilitiesopen-sourcelearning+2
Talks·36 min
Jon Wade
Walks through an initial Linux incident response triage of a SystemdMiner sample using open-source logging tools.
incident-responselinuxmalware-analysis+2
Talks·19 min
Jon Wade
Shares practical Linux incident response advice, covering home labs, live-host evidence handling and working with DevOps teams.
incident-responselinuxlessons-learned+2
Talks·41 min
Tracie Martin
Explains how exposed MQTT brokers are found on the internet and how their weak defaults can be enumerated.
iotvulnerabilitiesnetwork+2
Talks·13 min
Tracie Martin
Closes with a live Q&A on MQTT botnets, weak IoT configurations, and why network segmentation matters.
iotvulnerabilitiesnetwork+2
Talks·53 min
April C. Wright
Explains how doxing works and walks through a personal risk assessment and steps to protect your online identity.
privacyopen-sourceintelligence+2
Talks·13 min
ttheveii0x · bearofberlin
Live Q&A where the presenters discuss sharing indicators, public sandboxes, and aging out threat intel.
intelligencethreatmalware-analysis+2
Talks·8 min
K "Turb0Yoda" Singh
Answers beginner questions on car hacking, from entry-level tools like the CANtact to finding local meetups.
introductioninterviewdevice+2
Talks·11 min
Eva Galperin
A live question-and-answer session after a keynote covers facial recognition, stalkerware, internships, and surveillance in Latin America.
privacyinterviewdiscussion+2
Talks·8 min
Andrew
A short interview traces how a pen tester moved from automating routine checks to deeper manual app analysis.
interviewweblessons-learned+1
Talks·8 min
Aaron Sparling
Covers memory forensics tooling tips, shellcode emulation options, and command-line workflows for finding hidden executable code.
malware-analysisreverse-engineeringincident-response+1