Antisyphon Training

SOC Summit Talk: How UI/UX Impacts SOC Performance
2026-03-25 12:30 - 12:55 (America/New_York)
With Bruce Potter

Are your SOC tools helping or slowing you down?

In the SOC, velocity and accuracy matter. We train, learn the tools of the trade, and generally work to excel at our jobs.

However, there is one entity in the SOC that is often working against us… the user experience of modern cybersecurity tools.

While we often have an excess of data at our fingertips, getting to that data, making sense of it, and responding appropriately can be stymied by poor user interfaces and the overall experience of the tools we rely on.

In this 25-minute technical presentation, Bruce Potter, CEO and founder of Turngate, will examine the impact of good and bad UI on security operations.

You’ll learn how UI/UX affects SOC performance, see examples of tools that help or hinder operations, discover how to evaluate SOC tools effectively, and gain strategies to improve workflow and decision-making despite tool limitations.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Bruce Potter

Bio

Bruce Potter is the CEO and founder of Turngate. Bruce has been in the cybersecurity business for nearly 30 years, focusing on defensive technologies and security operations. Prior to Turngate, Bruce served as the CISO at ClearStreet, a prime brokerage firm based in New York City. At ClearStreet, Bruce built and oversaw the cybersecurity and privacy risk programs. Prior to ClearStreet, Bruce was the CISO at Expel, an MDR based in Herdon VA. Bruce helps organize the ShmooCon cybersecurity conference and has published numerous articles and several books over the years.

SOC Summit Talk: Detecting Malware with YARA Rules
2026-03-25 13:00 - 13:25
With Troy Wojewoda

Ever wondered how threat hunters automate pattern detection across massive datasets?

Join Troy Wojewoda (Black Hills Infosec Incident Responder/Threat Hunter/Intelligence/SOC Principal Analyst) for a 25-min technical presentation on the practical use of YARA for incident response and threat hunting.

You’ll learn about YARA rules, strings, conditions, and how they help detect patterns in files and processes.

Troy will teach through real-world examples of how YARA boosts detection, from spotting malware families to scanning memory dumps, and give you the hands-on skills to start creating and deploying your own YARA rules right away.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.
Troy Wojewoda will be teaching his Network Forensics & Incident Response class March 30-31.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Troy Wojewoda

Bio

Troy Wojewoda is a Security Analyst at Black Hills Information Security (BHIS). Prior to joining BHIS, Troy has held roles in application and system administration, host and network intrusion detection, wireless security, penetration testing, digital forensics, malware analysis, threat hunting, and incident response. In addition to earning several professional certifications, Troy has a BS in Computer Engineering and Computer Science.

SOC Summit Talk: Proactive Threat Prevention with Wazuh
2026-03-25 14:00 - 14:25
With Santiago Bassett

How many known CVEs are sitting in your environment right now without you realizing it?

Join Santiago Bassett (founder and CEO of Wazuh) for a 25-min deep dive into how SOC teams can prevent attacks before they happen by combining real-time vulnerability detection, security configuration assessment, and posture management

Learn how Wazuh constantly checks your systems for known CVEs, verifies security settings against CIS benchmarks, and keeps track of installed software to catch outdated or unauthorized applications.

Santiago will teach you how these findings can trigger automated actions before attackers strike.

We invited Santiago and Wazuh to present because Wazuh is an open-source cybersecurity platform, bringing XDR and SIEM together in a single solution, which can be especially helpful if you don’t have anything in place yet.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Santiago Bassett

Bio

Santiago Bassett is the founder and CEO of Wazuh, with over 20 years of experience in cybersecurity and software engineering. His passion for building accessible security tools and his background in SIEM, IDS, and XDR technologies led him to create Wazuh.

SOC Summit Talk: One Sigma to Rule Them All
2026-03-25 14:30 - 14:55
With Dan Rearden

You have Indicators of Compromise (IOCs) and EventIDs, but how do you maximize their use across your entire detection stack?

Join Dan Rearden, ProCircular SOC Analyst Tier II, for a technical 25-min presentation on Sigma Rules and their application to your Security Information and Event Management (SIEM).

You’ll learn what a Sigma Rule is, their benefits to your organization, how to craft them yourself, and ways to translate them into your SIEM query language.

Open up your favorite text editor, and become the SIGMA of your SOC next time an emerging threat pops up!

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Dan Rearden

Bio

Hiya everyone! I’m Dan Rearden, aka HaircutFish. My journey into the world of IT started unexpectedly at the start of 2020 with a knee injury. That left me in a career quandary, as I wasn’t able to return to my previous employment. Finding myself with some unexpected downtime, I decided to plunge headfirst into studying IT. Building my first PC and installing Windows opened up a whole new world, especially when I discovered the magic of VMs and started exploring Linux. Honestly, the more I learned, the more captivated I became. It felt like stepping onto a path that kept branching off into equally interesting directions. My ADHD absolutely thrives on that kind of exploration!

One of those branches led me to a small computer and mobile repair shop, where I got hands-on experience tearing down and fixing all sorts of tech. Eventually, another fork in the road appeared: should I deepen my repair skills or explore something new? Hacking caught my eye, and I was instantly hooked. For me, it’s all about the thrill of solving puzzles, and cybersecurity is just one giant, intricate puzzle.

Fast forward to today, and that hacking path presented me with another exciting choice: Red Team or Blue Team? Blue Team resonated more with who I am, so I chose Blue Team. All that dedicated learning, especially in the realm of Blue Team tactics, brought me to my current position at ProCircular where I triage tickets daily, as I work towards becoming a detection engineer.

SOC Summit Talk: From Cyber Threat Intelligence (CTI) to Detection
2026-03-25 15:00 - 15:25
With Hayden Covington

How do you go from reading a threat intel report to deploying a working detection?

Join Hayden Covington, Black Hills Infosec SOC SecOps Lead, for a technical session on the practical workflow of transforming threat intelligence into detections.

You’ll learn how to extract the detection logic buried in CTI reports, translate it into queries your SIEM understands, and validate that it actually works.

Walk away with a clear method you can apply the next time a new threat report hits your desk.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Hayden Covington will be teaching his SOC Detection Engineering Crash Course on April 10.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Hayden Covington

Bio

Hayden Covington is a Senior Analyst in Black Hills Information Security’s SOC where he specializes in training, quality assurance, detection engineering, and investigative analysis. With a previous background as a SOC analyst for a US naval contractor, Hayden has extensive experience in Digital Forensics and Incident Response (DFIR), Security Orchestration, Automation, and Response (SOAR), and insider threat.

SOC Summit Talk: Validate Security Controls with Atomic Red Team
2026-03-25 15:30 - 15:55
With Carrie Roberts

Do you actually know if your security tools will trigger when it matters most, or are you just hoping they will?

In this 25-minute technical presentation, Carrie Roberts (Senior Distinguished InfoSec Engineer) will teach you how to leverage the power of the open-source Atomic Red Team library to execute scripted, realistic cyber-attacks within your own environments.

You’ll learn how to move beyond assumptions by empirically validating your defenses, confirming that alerts fire as expected, and pinpointing critical coverage gaps before an adversary exploits them.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Carrie Roberts

Bio

Carrie Roberts is a programmer, turned pentester, turned red teamer, turned blueish purple. She is currently on the Red Team at Walmart. She loves to learn and give back to the community. She is one of the primary Atomic Red Team project maintainers and developers and has developed many of her own open-source tools. She holds master’s Degrees in both Computer Science and Information Security Engineering.

Carrie Roberts

Securing the Cloud: Foundations
2026-04-01 10:00 - 2026-04-02 18:00

Incident Response Simplified
2026-04-03 10:00 - 18:00

SOC Core Skills with John Strand
2026-04-06 12:00 - 2026-04-09 16:00

Workshop: SOC Detection Engineering Crash Course
2026-04-10 12:00 - 16:00

Workshop: How to Think Like a Cybersecurity Defender
2026-04-17 12:00 - 16:00

Information Security Core Skills™
2026-05-11 12:00 - 2026-05-14 16:00

Workshop: Threat Actor Profiling: Know Your Enemy
2026-05-15 12:00 - 16:00

Workshop: Build Your Own AI Security Agent
2026-06-12 12:00 - 16:00

Defending M365 & Azure
2026-06-15 10:00 - 2026-06-16 18:00

Active Defense and Cyber Deception with John Strand
2026-06-29 12:00 - 2026-07-02 16:00

Workshop: CI CD Exploitation and Hardening
2026-07-10 12:00 - 16:00
