~/talks

Julie Agnes Sparks

what they talk about

where they keep going back

on a stage with

all 4 in the filters

who talks about the same things

nobody close enough yet

titleconferencedate
Critical SaaS, Critical Blind Spots: A Detection Engineer's Field Guide to SaaS AttacksFIRST Conference 2026 (FIRSTCON26)2026-06-14
Covers concrete SaaS attack patterns and detections: Salesforce and Clue breaches via OAUTH tokens abused to pull CRM tables, Snowflake exfiltration from dev…
Talk on
📙 The Room Where It Happens (Identity Compromise Edition): Behind the scenes of Okta attack campaigns 🔥BSidesSF 20262026-03-21
Okta shows 1,081 event types but useful hunting focuses on authentication and policy evaluation events; look for sessionId and dthash fields plus debugContext…
Talk on
Detection as Code: The Engineering-Focused Future...BSidesSF 20232023-04-22
Teams move detections into version control with CI/CD to get detection as code and run adversary-as-code tests so a new rule is validated against simulated…
Talk on
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.