Workshop: SOC Detection Engineering Crash Course with Hayden Covington
2025-07-18 11:00 - 16:00 (America/New_York)

Workshop: Foundational Application Security Training with Bill McCauley
2025-07-31 11:00 - 16:00 (America/New_York)

Getting Started in Security with BHIS and MITRE ATT&CK with John Strand
2025-08-18 11:00 - 2025-08-21 16:00, 2025-12-02 10:00 - 2025-12-03 18:00 (America/New_York)

Blue Team Summit
2025-08-27 08:00 - 17:00 (America/Denver)
Summit:

August 27 @ 11:00 am – 4:00 pm EDT

Live Training:

August 28 @ 9:00 am – August 29 6:00 pm EDT

REGISTER FOR SUMMIT ONLY

REGISTER FOR LIVE TRAINING

We see you Blue Team.

You wake up everyday and wonder, “what’s it going to be today?”

Let’s gather together and share our joys, frustrations, reflections on the past, and hopes for the future.

Wednesday: A five-hour Virtual Summit

Thursday & Friday: Two days of hands-on, high-quality cybersecurity training.

This is a five-hour virtual event where we’ll all figure out: what’s working, what could work if we had stakeholder buy-in, and what in the heck might be coming next for us to plan for.

We’re all in this together!

Take Your Learning Further with LIVE Hands-On Training

Training Classes Include:

Register Now!

Offense for Defense with Tim Medin

Date: August 28-29, 2025 Time: 9 AM – 6 PM EDT

A specialized course tailored for information security blue teamers, or defenders, aiming to fortify their skills in offensive security strategies. Throughout this program, participants will delve into the fundamentals of offensive security, gaining insight into the tactics, techniques, and procedures employed by adversaries.

Register Now!

Defending M365 & Azure with Kevin Klingbile

Date: August 28-29, 2025 Time: 9 AM – 6 PM EDT

This class is designed to be an introduction to M365 and Azure security strategies. This course will equip IT professionals with the knowledge and skills needed to defend Azure and Microsoft 365 environments effectively. We will cover cloud security measures and common misconfigurations. In addition, Red Teamers will learn to identify common attack surfaces within their client’s environments.

Register Now!

Cyber Threat Intelligence 101 with Wade Wells

Date: August 28, 2025 Time: 9 AM – 6 PM EDT

This comprehensive course on Threat Intelligence Management is designed for cybersecurity professionals who aspire to master the art of analyzing and mitigating cyber threats effectively. The curriculum covers a broad spectrum of topics from the foundational concepts of threat intelligence to advanced applications in various organizational contexts.

Register Now!

Active Directory Security and Hardening with Jordan Drysdale and Kent Ickler

Date: August 28-29, 2025 Time: 9 AM – 6 PM EDT

This hands-on course is built for defenders who want to understand, audit, and harden AD from the inside out. Students will work directly in a lab environment to identify misconfigurations, analyze attack paths, implement defensive controls, and apply industry best practices to reduce risk.

Register Now!

Network Forensics and Incident Response with Troy Wojewoda

Date: August 28-29, 2025 Time: 9 AM – 6 PM EDT

This course covers incident handling fundamentals, attacker methodologies, network protocol abuse detection, hands-on network packet analysis, Zeek scripting, flow data analysis, and real-world attack scenarios. This course uses an assortment of network data acquisition tools and techniques with a focus on open-source, vendor-neutral solutions. Students who take this course will learn how to perform network traffic and protocol analysis that ultimately supports cybersecurity incident response efforts.

Why Attend Antisyphon Training Events?Antisyphon Training Summits are built on a commitment to fostering community and engagement. Our events encourage connections between attendees, instructors, and industry leaders. Join us to learn, collaborate, and grow your network in the cybersecurity community.

Summit Dates & Times

Wednesday, August 27, 2025

11:00 AM To 4:00 PM EDT

Class Dates & Times

Thursday, August 28, 2025

9:00 AM To 6:00 PM EDT

Friday, August 29, 2025

10:00 AM To 6:00 PM EDT

Cyber Threat Intelligence 101 with Wade Wells
2025-08-28 09:00 - 18:00 (America/New_York)

Offense for Defense with Tim Medin
2025-08-28 09:00 - 2025-08-29 18:00 (America/New_York)

Defending M365 & Azure with Kevin Klingbile
2025-08-28 09:00 - 2025-08-29 18:00 (America/New_York), 2025-10-07 08:30 - 2025-10-08 17:00 (America/Denver)

Active Directory Security and Hardening with Jordan Drysdale and Kent Ickler
2025-08-28 09:00 - 2025-08-29 18:00 (America/New_York)

Foundations in Space Cybersecurity: Hardware Edition with Tim Fowler
2025-10-07 08:30 - 2025-10-08 17:00 (America/Denver)

Offense for Defense with Jason Downey and Tim Medin
2025-10-07 08:30 - 2025-10-08 17:00 (America/Denver)

Ransomware Attack Simulation and Investigation for Blue Teamers with Markus Schober
2025-10-07 08:30 - 2025-10-08 17:00 (America/Denver)

Securing the Cloud: Foundations with Andrew Krug
2025-10-07 08:30 - 2025-10-08 17:00 (America/Denver)

SOC Core Skills with John Strand
2025-10-20 11:00 - 2025-10-23 16:00 (America/New_York)

Active Defense and Cyber Deception with John Strand
2026-01-19 12:00 - 2026-01-22 16:00 (America/New_York)

Cybersecurity Foundations
2026-02-23 12:00 - 2026-02-26 16:00 (America/New_York)

Workshop: Hacking AI-LLM Applications
2026-03-06 12:00 - 16:00 (America/New_York)

Attacking, Defending, and Leveraging AI-LLM Systems
2026-03-16 10:00 - 2026-03-17 18:00 (America/New_York)

SOC Summit Talk: Needle Hunting: An Endpoint Investigation Cheat Sheet
2026-03-25 10:00 - 10:25 (America/New_York)
With Patterson Cake

How do you investigate – let alone understand – an endpoint operating system with more than 50 million lines of code?

Join Patterson Cake, Black Hills Infosec Director of Incident Response, for a technical session outlining a prioritized approach to endpoint investigations, focusing on where and how unauthorized access and activity impact Windows and Linux.

You’ll learn about the endpoint “attack surface,” prioritization of operating-system artifact selection, suggested workflow for artifact acquisition, and a methodology for identification of indicators of compromise.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Patterson Cake will be teaching his Incident Response Simplified class on April 3.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Patterson Cake

Bio

Patterson Cake joined the Black Hills Information Security (BHIS) pirate ship in June of 2023 as a Security Analyst focusing primarily on detection engineering and digital forensics and incident response. He chose BHIS because, to paraphrase, “doing cool stuff with cool people” and “making the world a better/safer place” is exactly how he wants to spend his professional time and energy. It also helps that he has a bit of history with a couple of awesome folks that have been with BHIS for many moons. Prior to joining the team, Patterson helped build and lead a DFIR practice for an MSSP, worked as a senior security engineer for AWS Managed Services, and spent several years in enterprise cybersecurity, often healthcare related, focusing on intermingling offensive security and incident response in technical and leadership roles. Outside of work, he enjoys spending time with his family, which often involves motorcycles, outdoor sports, movies, and music.

SOC Summit Talk: Practical Email Forensics with EML Analyzer
2026-03-25 10:30 - 10:55 (America/New_York)
With Seth Williams

When you’re handed a suspicious email, how do you investigate what it is really doing?

In this 25-minute technical presentation, Seth Williams will walk through hands-on email forensics using Sublime Security’s free EML Analyzer, teaching you how to break down raw email files to uncover the true mechanics of phishing, malware delivery, and social engineering attacks.

You’ll learn how to quickly review headers, authentication results, URLs, attachments, and metadata to validate detections, explain why an email is dangerous, and confidently decide when to escalate or close alerts and user reports.

Sharpen your email analysis skills and improve triage with evidence-based investigations.

EML Analyzer – Sublime Security

We invited Seth and Sublime Security to present because their free tool can help you improve your suspicious email investigations today.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Seth Williams

Bio

Seth Williams is the Global Partner CTO at Sublime Security, where he builds and scales partner ecosystems across MSSPs, VARs, GSIs, and technical alliances, helping partners and customers achieve real-world security outcomes. With a career that spans federal and commercial security architecture, large-scale SIEM operations, professional services leadership, and security strategy, Seth brings a practical understanding of how security actually works in the field. He focuses on clear technical alignment, cutting through complexity, and turning advanced security capabilities into straightforward, dependable solutions that partners can deliver confidently.

SOC Summit Talk: Using Pentest Findings to Improve Detections
2026-03-25 11:00 - 11:25 (America/New_York)
With Ashley Knowles

Are your pentest reports actually helping you make your detections better?

Penetration tests reveal more than exploited or identified vulnerabilities. They can also expose blind spots in visibility and detections.

Join Ashley Knowles, a Black Hills InfoSec Security Consultant, for a 25-minute technical presentation where she will draw on real-world penetration testing experience to help you close coverage gaps.

You’ll learn how to turn penetration test findings into actionable improvements for alerting, coverage, and detections.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Ashley Knowles

Bio

Ashley Knowles joined Black Hills Information Security (BHIS) in Fall 2021. As a Security Consultant, Ashley’s role is to perform network (internal/external), social engineering, and cloud penetration tests, as well as participating in red team assessments. Since joining the infosec community in 2013, she has developed and taught hacking classes, worked as a security consultant, and been a team lead on a red team. Ashley serves as a mentor at a local high school’s cybersecurity class and, as someone who loves to learn and teach, she looks forward to developing and teaching classes that add to BHIS’s educational catalogue. In her free time, Ashely enjoys photography, hiking and exploring new places with her kids, and building Legos.

SOC Summit Talk: Augmented Detection Engineering
2026-03-25 11:30 - 11:55 (America/New_York)
With Wade Wells

Do you understand where AI can safely support the detection lifecycle?
Join Wade Wells (Staff Detection & Response Engineer) for a 25-minute, conversational walk-through of how AI can boost every part of the detection lifecycle, from generating new detection ideas and tightening logic to evaluating coverage, finding blind spots, and automating documentation.

This talk shows practical ways AI can brainstorm attack paths, tighten detections, translate logic, surface logging gaps, and draft documentation, such as playbooks and detection cards, so engineers can focus on precision and strategy.
Wade will focus on real, usable techniques, not hype, showing what AI can safely augment and how to build a modern, AI-assisted detection workflow.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Wade Wells

Bio

Wade Wells is the Lead Detection Engineer for a Fortune 30 financial company. He has worked for eight years in security operations, performing threat hunting, cyber threat intelligence, and detection engineering, primarily in the financial sector. ​Active in the cybersecurity community, Wade frequently speaks at prominent industry events and is involved with several security-focused organizations.

SOC Summit Talk: Static Email Analysis
2026-03-25 12:00 - 12:25 (America/New_York)
With Ched Wiggins

Do you know how to protect your organization’s brand from reputational damage due to email-based attacks?

Join Ched Wiggins (Security Operations Center Lead) for a 25-minute, technical presentation on how to analyze email contents for indicators and clues in order to ensure the minimal number of suspicious emails enter your user’s Inbox.

Ched will teach you practical analysis methods and email components: headers, domains, IP addresses, SPF, DKIM, DMARC, hyperlinks, phones numbers, attachments, and how to carefully craft email filtration.

You’ll learn through real-world samples and solutions how to prevent and block suspicious links and other lures from reaching your users’ desks.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Ched Wiggins

Bio

Ched “Cheddar” Wiggins is the Security Operations Center Lead at a mid-sized public teaching university. He has four years’ experience in IT and Security Operations, five years’ experience in nuclear submarine power plant operations, and four years’ experience in surface warship navigation, small boats operations, and leadership.

In his spare time, he likes to read, journal, meditate, hunt, fish, snowboard, walk outside to touch grass, play computer games, and work on small home and computer projects.

SOC Summit Talk: How UI/UX Impacts SOC Performance
2026-03-25 12:30 - 12:55 (America/New_York)
With Bruce Potter

Are your SOC tools helping or slowing you down?

In the SOC, velocity and accuracy matter. We train, learn the tools of the trade, and generally work to excel at our jobs.

However, there is one entity in the SOC that is often working against us… the user experience of modern cybersecurity tools.

While we often have an excess of data at our fingertips, getting to that data, making sense of it, and responding appropriately can be stymied by poor user interfaces and the overall experience of the tools we rely on.

In this 25-minute technical presentation, Bruce Potter, CEO and founder of Turngate, will examine the impact of good and bad UI on security operations.

You’ll learn how UI/UX affects SOC performance, see examples of tools that help or hinder operations, discover how to evaluate SOC tools effectively, and gain strategies to improve workflow and decision-making despite tool limitations.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Bruce Potter

Bio

Bruce Potter is the CEO and founder of Turngate. Bruce has been in the cybersecurity business for nearly 30 years, focusing on defensive technologies and security operations. Prior to Turngate, Bruce served as the CISO at ClearStreet, a prime brokerage firm based in New York City. At ClearStreet, Bruce built and oversaw the cybersecurity and privacy risk programs. Prior to ClearStreet, Bruce was the CISO at Expel, an MDR based in Herdon VA. Bruce helps organize the ShmooCon cybersecurity conference and has published numerous articles and several books over the years.

SOC Summit Talk: Detecting Malware with YARA Rules
2026-03-25 13:00 - 13:25 (America/New_York)
With Troy Wojewoda

Ever wondered how threat hunters automate pattern detection across massive datasets?

Join Troy Wojewoda (Black Hills Infosec Incident Responder/Threat Hunter/Intelligence/SOC Principal Analyst) for a 25-min technical presentation on the practical use of YARA for incident response and threat hunting.

You’ll learn about YARA rules, strings, conditions, and how they help detect patterns in files and processes.

Troy will teach through real-world examples of how YARA boosts detection, from spotting malware families to scanning memory dumps, and give you the hands-on skills to start creating and deploying your own YARA rules right away.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.
Troy Wojewoda will be teaching his Network Forensics & Incident Response class March 30-31.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Troy Wojewoda

Bio

Troy Wojewoda is a Security Analyst at Black Hills Information Security (BHIS). Prior to joining BHIS, Troy has held roles in application and system administration, host and network intrusion detection, wireless security, penetration testing, digital forensics, malware analysis, threat hunting, and incident response. In addition to earning several professional certifications, Troy has a BS in Computer Engineering and Computer Science.

SOC Summit Talk: Proactive Threat Prevention with Wazuh
2026-03-25 14:00 - 14:25 (America/New_York)
With Santiago Bassett

How many known CVEs are sitting in your environment right now without you realizing it?

Join Santiago Bassett (founder and CEO of Wazuh) for a 25-min deep dive into how SOC teams can prevent attacks before they happen by combining real-time vulnerability detection, security configuration assessment, and posture management

Learn how Wazuh constantly checks your systems for known CVEs, verifies security settings against CIS benchmarks, and keeps track of installed software to catch outdated or unauthorized applications.

Santiago will teach you how these findings can trigger automated actions before attackers strike.

We invited Santiago and Wazuh to present because Wazuh is an open-source cybersecurity platform, bringing XDR and SIEM together in a single solution, which can be especially helpful if you don’t have anything in place yet.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Santiago Bassett

Bio

Santiago Bassett is the founder and CEO of Wazuh, with over 20 years of experience in cybersecurity and software engineering. His passion for building accessible security tools and his background in SIEM, IDS, and XDR technologies led him to create Wazuh.

SOC Summit Talk: One Sigma to Rule Them All
2026-03-25 14:30 - 14:55 (America/New_York)
With Dan Rearden

You have Indicators of Compromise (IOCs) and EventIDs, but how do you maximize their use across your entire detection stack?

Join Dan Rearden, ProCircular SOC Analyst Tier II, for a technical 25-min presentation on Sigma Rules and their application to your Security Information and Event Management (SIEM).

You’ll learn what a Sigma Rule is, their benefits to your organization, how to craft them yourself, and ways to translate them into your SIEM query language.

Open up your favorite text editor, and become the SIGMA of your SOC next time an emerging threat pops up!

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Dan Rearden

Bio

Hiya everyone! I’m Dan Rearden, aka HaircutFish. My journey into the world of IT started unexpectedly at the start of 2020 with a knee injury. That left me in a career quandary, as I wasn’t able to return to my previous employment. Finding myself with some unexpected downtime, I decided to plunge headfirst into studying IT. Building my first PC and installing Windows opened up a whole new world, especially when I discovered the magic of VMs and started exploring Linux. Honestly, the more I learned, the more captivated I became. It felt like stepping onto a path that kept branching off into equally interesting directions. My ADHD absolutely thrives on that kind of exploration!

One of those branches led me to a small computer and mobile repair shop, where I got hands-on experience tearing down and fixing all sorts of tech. Eventually, another fork in the road appeared: should I deepen my repair skills or explore something new? Hacking caught my eye, and I was instantly hooked. For me, it’s all about the thrill of solving puzzles, and cybersecurity is just one giant, intricate puzzle.

Fast forward to today, and that hacking path presented me with another exciting choice: Red Team or Blue Team? Blue Team resonated more with who I am, so I chose Blue Team. All that dedicated learning, especially in the realm of Blue Team tactics, brought me to my current position at ProCircular where I triage tickets daily, as I work towards becoming a detection engineer.

SOC Summit Talk: From Cyber Threat Intelligence (CTI) to Detection
2026-03-25 15:00 - 15:25 (America/New_York)
With Hayden Covington

How do you go from reading a threat intel report to deploying a working detection?

Join Hayden Covington, Black Hills Infosec SOC SecOps Lead, for a technical session on the practical workflow of transforming threat intelligence into detections.

You’ll learn how to extract the detection logic buried in CTI reports, translate it into queries your SIEM understands, and validate that it actually works.

Walk away with a clear method you can apply the next time a new threat report hits your desk.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Hayden Covington will be teaching his SOC Detection Engineering Crash Course on April 10.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Hayden Covington

Bio

Hayden Covington is a Senior Analyst in Black Hills Information Security’s SOC where he specializes in training, quality assurance, detection engineering, and investigative analysis. With a previous background as a SOC analyst for a US naval contractor, Hayden has extensive experience in Digital Forensics and Incident Response (DFIR), Security Orchestration, Automation, and Response (SOAR), and insider threat.

SOC Summit Talk: Validate Security Controls with Atomic Red Team
2026-03-25 15:30 - 15:55 (America/New_York)
With Carrie Roberts

Do you actually know if your security tools will trigger when it matters most, or are you just hoping they will?

In this 25-minute technical presentation, Carrie Roberts (Senior Distinguished InfoSec Engineer) will teach you how to leverage the power of the open-source Atomic Red Team library to execute scripted, realistic cyber-attacks within your own environments.

You’ll learn how to move beyond assumptions by empirically validating your defenses, confirming that alerts fire as expected, and pinpointing critical coverage gaps before an adversary exploits them.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Carrie Roberts

Bio

Carrie Roberts is a programmer, turned pentester, turned red teamer, turned blueish purple. She is currently on the Red Team at Walmart. She loves to learn and give back to the community. She is one of the primary Atomic Red Team project maintainers and developers and has developed many of her own open-source tools. She holds master’s Degrees in both Computer Science and Information Security Engineering.

Carrie Roberts
