FIRSTCON25

61 talks · 2024 · indexed by Breach Arc Archive. Links open each talk on YouTube.

• Case: City of Helsinki Data Breach 2024 2024
• 99 Bottles of Trust on the Wall: Approaches to Building Convivial Communities
• A Look at New ASNs
• All Ransomware Economic Models are Wrong, But This One is Useful
• Anti-Forensics - You are Doing it Wrong (Believe Me, I'm an IR Consultant)
• Artemis: How CERT PL Improves the Security of the Polish Internet
• Automated ATT&CK Technique Chaining
• AWS Advanced Offensive Techniques, What Defenders Need to Know
• Aztronomy: Establishing the Foundation of Attack Path Analysis in Azure
• Best Practices for Data Privacy Breach Response: Lessons Learned from Social Media Case Studies
• Beyond CVEs: Mastering the Landscape with Vulnerability-Lookup
• Breaking Down Barriers: Analyzing Active Directory Security Across Industries
• Breaking the SIEM Confinement
• Bringing Actionable Data to Internet Defenders
• Broken Seals, Broken Trust: Flaws and Defences in the Certificate Ecosystem
• Building the Blueprint: Designing Effective Storyboards for Cybersecurity Tabletop Exercises
• Closing Remarks
• Comprehensive Investigation Results on Malware Code Interpretation by GPT-4
• Conference Opening & Welcome Remarks
• Detection Engineering 101 : Establishing a Structured Approach to Detection Engineering
• Draugnet: Anonymous Threat Reporting That Actually Works
• Engaging with the Media to Foster Cybersecurity Resilience
• Enhancing Incident Response with AWS CIRT, MSSPs, and ISVs
• Establishing a Global Community of Practice on Coordinated Vulnerability Disclosure (CVD)
• Evading in Plain Sight: How Adversaries Beat User-Mode Protection Engines
• FIRST AGM (Annual General Meeting)
• Forecasting Cybersecurity Data: Making Sense of the Senseless
• Friday Keynote Address - Network Security is a Team Sport, so How Do We Set and Manage the Team
• From TTPs to Deception: Crafting Strategies
• From Zero to Prepared: Implementing a Weekly Incident Response Drill Program
• Guardians of the Hypervisor
• Incident Preparedness Takeaways from 5000 Exercise Participants
• Inside the Information Stealer Ecosystem: From Compromise to Countermeasure
• Lazarus Group Evolved Their Infection Chain with Old and New Malware
• Lightning Talks!
• Maximizing the Potential of AWS-WAF
• Modern MISP
• Monday Keynote Address: Unpacking the Human Factor
• Navigating the Threat Actor Maze: A Tool for Mapping Names, Families and Insights
• One SOC, The Whole SOC, and Nothing But The SOC, So Help Me
• Only Seeing Stars: Enabling the Open Source Scripting Community with OCSF
• Pivoting To Resilience: Disruptive Incidents And How We Prepare For Them
• RE(HACK)T: Open-Sourcing a Boardgame for User Awareness
• Revolutionizing Malware Analysis with Agentic AI: Lessons and Innovations
• Routing Security for Enterprises: Secure Your Supply Chain
• Social Engineering in the Age of AI: Rethinking Security Awareness Training
• The Convergence of Threat Behaviors Across Intrusions
• The Evolving Cybersecurity Governance Landscape
• The Funny Story of Active Directory Backdooring
• The Ontology for SOC Creation Assistance and Replication (OSCAR)
• The Party Isn't Over: Uncovering Konfety's Novel "Evil Twin" Technique
• Threat Hunting with Python & Pandas
• Uncovering the Whispers of an APT Targeting Specific Industries in South Asia
• Unmasking Cyber Security: Rethinking Small to Medium Business Security Awareness
• Unmasking MSC Files
• Versus Killnet
• We All Want Validation (in our SecOps Detections)
• What Can Cybersecurity Incident Responders Learn from Real-World Crises?
• What Can Threat Intel Teams Learn from Journalists?
• What's New in CSAF v2.1: Key Updates Explained
• Why is Finnish Healthcare Doing So Well Against Ransomware?