FIRSTCON23

63 talks · 2022 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• Info-Stealer: Most Bang for the Buck Malware in 2022 2022
• "Compromising the Keys to the Kingdom" - Exfiltrating Data to Own and Operate the Exploited Systems
• Abusing Electron-Based Applications in Targeted Attacks
• An Introduction to EPSS, The Exploit Prediction Scoring System
• Annual General Meeting (AGM) and FIRST Update / Q&A
• AnoMark - Anomaly Detection in Command Lines with Markov Chains
• Assessing e-Government DNS Resilience
• Authentication Proxy Attacks: Detection, Response and Hunting
• Automating Cloud Forensics Lab Provisioning
• Building a New Cybersecurity Alert Priority Matrix
• Busy Bees - The Transformation of BumbleBee
• Can We Tell the Threat Actor from Their ATT&CK TIDs?
• Collective Defense Intelligence: A Model for Empowering the Open Cybersecurity Ecosystem
• Continuous Threat Intelligence Improvements
• Cracking the Chaos Ransomware Family
• Creating the Coordinator Rules
• CTI-Powered Hunting and Response
• Cyber Hygiene Hunting : Security Effectiveness Validation for Valid Security Posture
• Dissect: the Solution to Large-Scale Incident Response (and Why APTs Hate Us) | *Edited Version
• Everyone Should Care About National Cyber Security Strategy
• FIRST Hall of Fame Remarks & Mid-week Updates
• Five Easy Ways to Spoof Contributor/Package Reputation
• I Opened Pandora's Box and It Was Full of Obfuscation
• Improving CSIRTs' Procedures Through Standards
• Incident Command and "The Cloud" - 72 Hours of IR and Ticking
• Incident Command and "The Cloud" - 72 Hours of IR and Ticking
• Intel as Code - Building a Threat Informed Security Organization
• IOC-DREAM - IOC Distribution in Restricted Environment and Automating response based on MISP
• ISO 27035 Practical Value for CSIRTs and SOCs
• Keynote: Cybercrime and Law Enforcement Evolutions and Improving Integration Within (...)
• Keynote: How Did We Get Here?
• Keynote: Why Gender Diversity is Better Security
• Knocking Out Post-Exploitation Kits
• Lightning Talks I
• Lightning Talks II
• Mistakes Happen, Either Learn From Them Or Rinse And Repeat!
• MyJVN Product Dictionary Challenge for Collaboration with Vulnerability Database and (...)
• N-IOC's to Rule Them All
• No One Likes to be Excluded: What Is the Role of War Exclusions in Cyber Insurance?
• Objectifying Your Incident Management to Lift the Fog of IR
• Opening Remarks and Welcome Address
• Operationalization of Malawi CERT- Lessons Learnt and Challenges
• Pain and Suffering; Implementing CTI Successfully in a SOC
• Preserving Confidentiality When Hunting With Friends
• Ransomware Zugzwang
• Safeguarding IoT Devices in Digital Age - Building IoT Test Lab
• SIG Updates: Multi-Stakeholder Ransomware, CVSS, Cyber Insurance, DNS Abuse, EPSS
• SIG Updates: SecLounge, Automation, NETSEC, CSIRT, CSIRT Metrics, Vulnerability Coordination (...)
• SIG Updates: TLP, Malware Analysis, CTI, WoF, Red Team, Ethics
• Sliding Down the Slippery Analogy Slope and Landing in Clarity
• SOCCRATES: Automated Security Decision Support for SOCs and CSIRTs
• The 4 Pillars of Cyber Security
• The Female Conversation: Empowering Female Talent in Incident Response
• The Internet DDoS Threat Landscape
• The PowerPuff Girls of Information Sharing - Joining Forces To Protect The Universe!
• Three Simple and Effective Cybersecurity Exercises
• Till There Was Unix: Defending ESXi Against Ransomware Attacks
• Typosquatting Finder - An Open Source Solution to Find Typosquatted Domains
• UMQ? What Comes After TLP
• Universal (Software) Product Identity: Solving a Hard Problem Twice Over
• Using Apple Sysdiagnose for Forensics and Integrity Check
• What's Running on My Hosts? Process Identification Through Network Traffic Monitoring
• You Are a Manager Harry