Blue Team Summit

Offense for Defense with Tim Medin

Date: August 28-29, 2025 
Time: 9 AM – 6 PM EDT

A specialized course tailored for information security blue teamers, or defenders, aiming to fortify their skills in offensive security strategies. Throughout this program, participants will delve into the fundamentals of offensive security, gaining insight into the tactics, techniques, and procedures employed by adversaries.

Defending M365 & Azure with Kevin Klingbile

Date: August 28-29, 2025 
Time: 9 AM – 6 PM EDT

This class is designed to be an introduction to M365 and Azure security strategies. This course will equip IT professionals with the knowledge and skills needed to defend Azure and Microsoft 365 environments effectively. We will cover cloud security measures and common misconfigurations. In addition, Red Teamers will learn to identify common attack surfaces within their client’s environments.

Cyber Threat Intelligence 101 with Wade Wells

Date: August 28, 2025 
Time: 9 AM – 6 PM EDT

This comprehensive course on Threat Intelligence Management is designed for cybersecurity professionals who aspire to master the art of analyzing and mitigating cyber threats effectively. The curriculum covers a broad spectrum of topics from the foundational concepts of threat intelligence to advanced applications in various organizational contexts.

Active Directory Security and Hardening with Jordan Drysdale and Kent Ickler

Date: August 28-29, 2025 
Time: 9 AM – 6 PM EDT

This hands-on course is built for defenders who want to understand, audit, and harden AD from the inside out. Students will work directly in a lab environment to identify misconfigurations, analyze attack paths, implement defensive controls, and apply industry best practices to reduce risk.

Network Forensics and Incident Response with Troy Wojewoda

Date: August 28-29, 2025 
Time: 9 AM – 6 PM EDT

This course covers incident handling fundamentals, attacker methodologies, network protocol abuse detection, hands-on network packet analysis, Zeek scripting, flow data analysis, and real-world attack scenarios. This course uses an assortment of network data acquisition tools and techniques with a focus on open-source, vendor-neutral solutions. Students who take this course will learn how to perform network traffic and protocol analysis that ultimately supports cybersecurity incident response efforts.