Talks·18 min
Hilko Bengen
Shows how eBPF tracing of compiler and linker activity can expose hidden backdoors in software builds.
supplybuildlinux+2
Hilko Bengen
3 talks in the archive.
Filters+
1–3 of 3 talks
Talks·25 min
Hilko Bengen · Hendrik Schmidt
Shows how a large enterprise builds Linux security monitoring with auditd, Laurel and Velociraptor for incident response.
linuxincident-responsemonitoring+2
Talks·28 min
Hilko Bengen
Explains how Linux detection and response can work with auditd-based logging and open tooling instead of a commercial EDR.
linuxthreat-detectionincident-response+2