endpoint-detection

IEEE Symposium on Security and Privacy·15 min

• IEEE SP
• Blue Team
• Date: 2025
• Location: Ieee Sp

Presenters detail vulnerability discovery and exploitation in Tactical Provenance Analysis our Endpoint Detection and Response Systems.

Blue Team Village·21 min

• DEF CON
• Blue Team
• Date: Aug 2022
• Location: Las Vegas

Project Obsidian

Project Obsidian details configuring Sysinternals Sysmon to capture critical process creation, network connection, and DLL load events for investigations.

Blue Team Village·48 min

• DEF CON
• Blue Team
• Date: Aug 2021
• Location: Las Vegas

Sebastian Provost

Sebastian Provost demonstrates using Osquery to complement EDR/XDR systems, writing SQL queries to detect open-source C2 implant payloads on endpoints.

Main Stage·27 min

• DEF CON
• Blue Team
• Date: May 2019
• Location: Beijing

Aden Wee Jing Chung

Aden Wee Jing Chung explores you are not hiding from me .net at DEF CON China 1, examining dotnet-security and practical defenses.