Talks, Presentations and Workshops

Resource links (video, slides & code) for my conference talks | presentations | workshops | webinars

BlackHat Arsenal Europe 2024 : Simulating Adversary Techniques in M365 & Azure

• Video: TBD
• Slides: https://www.slideshare.net/slideshow/blackhat-europe-arsenal-2024-msinvader-simulating-adversary-techniques-in-m365-azure/274237005

BlackHat Arsenal USA 2024 : Simulating and Exploring Entra ID Attack Paths

• Video: https://www.youtube.com/watch?v=IzurUrOsvsQ
• Slides: https://www.slideshare.net/slideshow/blackhat-arsenal-usa-2024-simulating-and-exploring-entra-id-attack-paths/272129626

Splunk Conf 2024 : Cloud Identity Crisis: Defending Identities in an Okta Environment

• Video: https://conf.splunk.com/files/2024/recordings/SEC1648B.mp4
• Slides: https://conf.splunk.com/files/2024/slides/SEC1648B.pdf

Splunk Conf 2024 : Hunting M365 Invaders: Tactical Insights for M365 Threat Detection

• Video: https://conf.splunk.com/files/2024/recordings/SEC1470B.mp4
• Slides: https://conf.splunk.com/files/2024/slides/SEC1470B.pdf

Brucon 2023 : The Purple Malware Development Workshop

• Link: https://brucon0x0f.sched.com/event/1Nhw0

Splunk Conf 2023 : Securing the Cloudscape: Resilient Multi-Cloud Detection Engineering

• Video: https://conf.splunk.com/files/2023/recordings/SEC1225B.mp4
• Slides: https://conf.splunk.com/files/2023/slides/SEC1225B.pdf

BlackHat Arsenal Asia May 2023 : PurpleSharp Automated Adversary Simulation

• Slides: https://www.slideshare.net/mvelazco/blackhat-arsenal-2021/

XPOSURE 2023 : Detection-As-Code : Test Driven Development

• Video: https://www.youtube.com/watch?v=I8nECGMGENk
• Slides: https://www.slideshare.net/mvelazco/detectionascode-test-driven-detection-developmentpdf

SANS Webcast January 2023 : Purple Teaming to Enhance Detection Engineering

• Link: https://www.sans.org/webcasts/purple-teaming-to-enhance-detection-engineering/

Defcon 30 August 2022: The Purple Malware Development Approach

• Link: https://forum.defcon.org/node/241800

X33fcon June 2022 : Custom Malware Development: The Purple Approach

• Link: https://www.x33fcon.com/#!s/mauriciov.md

BSides Panama January 2022 : Simulando Adversarios con PurpleSharp (Spanish)

• Slides: https://www.slideshare.net/mvelazco/bsides-panama-2022/
• Video: https://www.youtube.com/watch?v=SqGAzhG9ynM

BlackHat Arsenal August 2021 : PurpleSharp - Active Directory Attack Simulations

• Video: https://www.youtube.com/watch?v=jvpVgJQPoXw
• Slides: https://www.slideshare.net/mvelazco/blackhat-arsenal-2021/

Defcon 29 Adversary Village August 2021 : PurpleSharp - Automated Adversary Simulation

• Video: https://www.youtube.com/watch?v=yi1epKf0lcM
• Slides: https://www.slideshare.net/mvelazco/defcon-29-adversary-village/

Security Weekly August August 2021 : Automated Adversary Simulation

• Video: https://www.youtube.com/watch?v=jCWQK2NPffA
• Blog: https://securityweekly.com/shows/purplesharp-automated-adversary-simulation-mauricio-velazco-bh21-2/

SANS Purple Team Summit May 2021 : Active Directory Purple Team Playbooks

• Video: https://www.youtube.com/watch?v=9UpPo20c1w8
• Slides: https://www.slideshare.net/mvelazco/purple-team-summit-2021/

Red Canary Atomic Friday Sept 2020 : Assessing detection coverage via adversary simulation

• Video: https://www.youtube.com/watch?v=HHy00gGFZpI

BlackHat Arsenal August 2020 - PurpleSharp: Adversasry Simulation for the Blue Team

• Video: https://www.youtube.com/watch?v=yaeNwdElYaQ
• Slides: https://www.slideshare.net/mvelazco/blackhat-2020-arsenal

Blue Team Village at DEFCON 28 August 2020 - Purple On My Mind: Cost Effective Automated Adversary Simulation

• Video: https://www.youtube.com/watch?v=XUxMj-eR0A0&feature=youtu.be
• Slides: https://www.slideshare.net/mvelazco/purple-on-my-mind-cost-effective-automated-adversary-simulation-olaf-hartong-mauricio-velazco

BSides Latin America September 2019 - Blue Team: Cazando y Detectando Amenazas

• Slides: https://www.slideshare.net/mvelazco/bsides-latam-2019

Att&ckcon 2.0 (2019) - Tracking and measuring your ATT&CK coverage with ATT&CK2Jira

• Video: https://www.youtube.com/watch?v=hrzR8TpnjAw&t=19m58s
• Slides: https://www.slideshare.net/mvelazco/attackcon-20-2019
• Code: https://github.com/mvelazc0/attack2jira

Derbycon 9.0 September 2019 - I sim(ulate), therefore i catch: enhancing detection engineering with adversary simulation

• Video: https://www.youtube.com/watch?v=7TVp4g4hkpg
• Slides: https://www.slideshare.net/mvelazco/derbycon-2019
• Code: https://github.com/mvelazc0/PurpleSharp

Defcon 27 August 2019 - Writing custom backdoor payloads using C#

• Slides: https://www.slideshare.net/mvelazco/defcon-27
• Code: https://github.com/mvelazc0/defcon27_csharp_workshop

BSides Baltimore 2019 - Embrace the Red: Enhancing detection capabilities with adversary simulation

• Video: https://www.youtube.com/watch?v=8JFP1wj37Vk&feature=emb_logo
• Slides: https://www.slideshare.net/mvelazco/bsides-baltimore-2019
• Code: https://github.com/mvelazc0/PurpleSpray

BSides Long Island 2019 - Threat Hunting: Stalking attackers in your network

• Slides: https://www.slideshare.net/mvelazco/bsides-long-island-2019

SANS Threat Hunting Summit (2018) - Hunting Lateral Movement with Windows Event Logs

• Slides: https://www.slideshare.net/mvelazco/sans-threat-hunting-summit-2019

Defcon 26 (2018) - Lateral Movement 101

• Slides: https://media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20workshops/DEF%20CON%2026%20-%20Workshop-Walter-Cuestas-and-Mauricio-Velazco-Lateral-Movement-101-2018-Update.pdf

BSides New York (2018) - Hunting for Suspicious User Behavior

• Slides: https://www.slideshare.net/mvelazco/bsides-nyc-2018-hunting-for-lateral-movement

Derbycon 7.0 (2017) - Hunting Lateral Movement for Fun and Profit

• Video: https://www.youtube.com/watch?v=hVTkkkM9XDg
• Slides: https://www.slideshare.net/mvelazco/derbycon-2017
• Code: https://github.com/mvelazc0/Oriana

PeruHack 2015 - Cyberespionaje de Naciones

• Slides: https://www.slideshare.net/mvelazco/peruhack-2015/

PeruHack 2014 - Post Explotacion en entornos Windows

• Slides: https://www.slideshare.net/mvelazco/peruhack-2014-post-explotacion-en-entornos-windows

LimaHack 2011 - Stuxnet: El arma del futuro

• Slides: https://www.slideshare.net/mvelazco/limahack-2011/

LimaHack 2010 - Breaking Tux: Creando exploits para GNU/Linux

• Slides: https://www.slideshare.net/mvelazco/limahack-2010-creando-exploits-para-gnulinux
• Video: https://www.youtube.com/watch?v=Ftkmu6b3cBw

LimaHack 2009 - SSL no esta roto... o si ?

• Slides: https://www.slideshare.net/mvelazco/limahack-2009-ssl-no-esta-roto-o-si