DEF CON 27/Blue Team Village across years
Paris, Bally's, Flamingo, and Planet Hollywood hotels, Las Vegas · 8-11 August 2019 · 14 talks
Blue Team Village at DEF CON 27 covers defensive security practices and incident response. The 14 talks explore malware analysis, threat hunting, detection engineering, log analysis, incident response, SOC operations, and defensive strategies.
1–14 of 14 talks
Blue Team Village·41 min
Cathy Ullman
The InfoSec industry was born out of fear. Initially it was fear from virus infections and later, external attacks. We capitalized on that fear to build more secure environments. But fear is hard to manage: too much f...
Blue Team Village·41 min
Shawn Thomas
A mostly live demo of base concepts of malware analysis using a multitude of tools on a Dridex sample pulled from a phishing campaign from PDF attachment to executable installation. The main point is to show people so...
Blue Team Village·45 min
dumby
Following testimony in Congress and a lengthy investigation of the Equifax breach in 2016, U.S. House of Representatives drafted a report. The report is AMAZING! It includes details of Equifax corporate structure, IT ...
Blue Team Village·41 min
Scoubi
BloodHound was originally built for Pentesters to easily identify highly complex attack paths but it can also be used to improve the overall security posture of your Active Directory. We will start with a short introd...
Blue Team Village·22 min
Christine Le
The life of a blue-teamer is daunting. There are logs to sift through, tasks to automate, incidents to triage, vulnerabilities to manage, meetings to attend, coffee to drink, etc. Scenarios have moving parts, procedur...
Blue Team Village·37 min
Siyu Zhu
Due to internal environment of Windows domains is always too tolerant, and enterprises are more concerned about border defenses than internal security, the penetration behavior based on Windows Active Directory has be...
Blue Team Village·19 min
Norman Lundt
Industrial Control System(ICS) protocols are often neglected in the realm of network security monitoring. Detecting, parsing, and finding malicious activity can be frustrating and time consuming. In this session we wi...
Blue Team Village·26 min
Lacie Fan
When the shadow brokers released a large number of Equation Group tools in 2017, many researchers jumped on the analysis of EternalBlue, FuzzBunch etc. The exploits of the leak have now been thoroughly analysed and mo...
Blue Team Village·44 min
Carlos Garay
Memhunter is an endpoint sensor tool specialized in detecting memory-resident malware. The detection process is performed through a combination of endpoint data collection and memory inspection scanners. Memhunter au...
Blue Team Village·44 min
claushoumann
Security Strategy for Small Medium Business
Blue Team Village·31 min
Georgios Kapoglis
In this talk we will go over traditional log analysis methods for AWS Cloudtrail logs and why we needed to find a better way of performing such investigations. We will then dive into AWS Athena which is essentially a ...
Blue Team Village·26 min
ch33r10
What if I told you that it is possible for blue teamers to practice CTI everyday?! With minimal guidance and insight, blue teamers can learn how to see things through the eyes of a cyber threat intel analyst. We’ll st...
Blue Team Village·17 min
Mark Orlando
The security industry is facing a severe talent shortage, but the threats are growing in number and sophistication. Finding talent, honing it to meet your specific mission, and retaining it have become immense challen...
Blue Team Village·48 min
Lak Shmi Sudheer
In today's ecosystem, verification of identity is no longer applicable just to the user; extending to microservices, cloud providers, IoT devices and many other emerging systems as well. 81% of discovered breaches are...
