Threat Hunting Summit Talk: Threat Hunting in the Dark: A Practical Approach
2026-06-17 13:30 - 13:55 (America/New_York)
With Shane Hartman

Register Here

You know threats exist on your network—but where do you begin looking? Which direction should you go, and do you even have the data you need to find them?

Join Shane Hartman, Principal IR Consultant at TrustedSec, as he turns threat hunting from guesswork into a disciplined, hypothesis‑driven process.

You’ll learn how to cast a wide net, refine your hypotheses, validate suspicious behavior with real telemetry, and convert findings into actionable detections.

By the end of this session, you’ll have a repeatable method for creating, assessing, and executing hunts—so the next time you’re hunting in the dark, you won’t be going in blind.

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Shane Hartman

Bio

Shane Hartman is a Principal Incident Response Consultant at TrustedSec, specializing in advanced threat hunting, forensic triage, and intrusion analysis. With over 30 years in IT and two decades in information security, Shane helps organizations detect, investigate, and contain targeted attacks against critical systems and intellectual property. His previous roles at FireEye, Fortinet, and RSA focused on malware reverse engineering, threat intelligence production, and adversary tradecraft analysis. He frequently presents and teaches at the University of South Florida on topics including Digital Forensics, Ethical Hacking, and Offensive Operations.

Threat Hunting Summit Panel: Legal Landmines, Insurance & Incident Response
2026-06-17 14:00 - 14:50
With Patterson Cake, Troy Wojewoda, John Danyluk and David Vanalek

Register Here

When should you call your cyber insurance provider, and when should you bring in outside legal counsel? And does privilege actually protect your incident communications from discoverability during litigation?

Join Patterson Cake (Director of IR, BHIS), Troy Wojewoda (Incident Responder, Threat Hunter, and SOC Principal Analyst, BHIS), John Danyluk (Partner, Gentry Locke), and David Vanalek (Chief Legal and Compliance Officer, Richmond National Insurance) for a fast‑paced, candid panel discussion that demystifies the legal and insurance decisions every defender eventually faces.

You’ll learn how incident responders, insurers, and attorneys think about notification timelines, privilege, documentation, and the real‑world consequences of calling—or not calling—the right people at the right time.

Bring your toughest questions: the panel will open the floor for live Q&A so you can finally get straight answers to the insurance and legal questions no one ever explains.

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Troy Wojeowda will teach Threat Hunting on the Edge on June 18.

Patterson Cake will be teaching LOLBINS vs. LOLBINS: Endpoint Threat Hunting on June 19.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructors

Patterson Cake

Bio

Patterson Cake has worked in cybersecurity for more than two decades, specializing in the development of incident-response teams, programs, and processes. He is currently the Director of Incident Response for Black Hills Information Security, holds more than twenty-five industry certifications, is a former SANS instructor, teaches for Antisyphon, and has trained law enforcement, military, and national cybersecurity organizations on four continents. Patterson is the creator of the “Incident Response Capabilities Matrix Model,” developed “Rapid Triage Workflow” for IR investigations, is a prolific speaker, and is actively involved in the cybersecurity community.

Troy Wojewoda

Bio

Troy Wojewoda is a Security Analyst at Black Hills Information Security (BHIS). Prior to joining BHIS, Troy has held roles in application and system administration, host and network intrusion detection, wireless security, penetration testing, digital forensics, malware analysis, threat hunting, and incident response. In addition to earning several professional certifications, Troy has a BS in Computer Engineering and Computer Science.

David T. Vanalek

Bio

David T. Vanalek is the Chief Legal and Compliance Officer and Corporate Secretary of Richmond National, a specialty excess and surplus lines insurance company dedicated to writing hard to place risks for small and mid-sized businesses across the country headquartered in Richmond, Virginia. David is responsible for all corporate governance, regulatory, compliance, claims law, and litigation activities of the company and its affiliates, and serves as legal advisor to the leadership team, business units, and board of directors. Prior to joining Richmond National, David served as the Claims Chief Operating Officer at a global Fortune 500 insurance carrier, where he led the day to day operational support for all claims divisions responsible for all lines of business throughout North America and Bermuda. David also served for years in various claims leadership roles in the professional liability, cyber liability and management liability product lines. Prior to joining the insurance industry, Mr. Vanalek was in private practice as a commercial litigator, serving clients throughout California and Illinois. He received his Bachelor’s degree from the University of California, Los Angeles, and his law degree from the University of California, Davis, where he served as an Editor on Law Review, as well as a judicial extern for an associate justice of the California Supreme Court. Mr. Vanalek is a frequent speaker on insurance, claims, technology, professional liability, cyber liability and management liability issues.

John Danyluk

Bio

John Danyluk is a partner at Gentry Locke and a member of its Band‑1‑ranked White Collar Defense, Investigations & Compliance practice group. He represents corporate and individual clients through all phases of the criminal process and advises highly regulated industries—including government contractors, healthcare, and critical infrastructure—on compliance and risk. A Certified Information Privacy Professional (CIPP/US), he guides organizations through complex data‑privacy and cybersecurity obligations, conducts internal investigations, and helps clients navigate cyber incidents and regulatory scrutiny. John draws on his experience as an Army JAG Officer and former Special Assistant U.S. Attorney, where he litigated more than 1,000 cases and advised senior leaders on procurement, trade regulations, and national‑security matters.

Threat Hunting Summit Talk: Fast-track Reports into Ready-Made Hypotheses with AI
2026-06-17 15:00 - 15:25
With Lauren Proehl

Register Here

What if every intelligence report instantly became a ready‑to‑run hypothesis — instead of dying in a Slack channel?

In this talk, Lauren Proehl, Global Head of Detection and Response at Marsh and co‑founder of THOR Collective, walks through a practical, repeatable workflow for using large language models to convert published threat reports into structured, testable hunt hypotheses.

She’ll break down how to extract attacker tradecraft, map TTPs, scope data sources, and generate analytic logic hunters can run immediately. Real examples will help you explore how crafted prompts can surface detection gaps, enrich investigations, and produce hypotheses that go far beyond IOC matching.

Examine how AI‑assisted workflows are reshaping the future of threat hunting and leave with a method you can put to work, whether you’re a solo hunter or running a mature program.

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Lauren Proehl

Bio

Lauren Proehl leads detection and response globally at Marsh, overseeing the full lifecycle from threat intelligence through incident response and red teaming. She is co-founder of THOR Collective, a practitioner-driven cybersecurity collective, and has spent her career identifying and disrupting cyber adversaries across Fortune 500 networks — from data breaches to targeted intrusions. She now works to define some part of the limitless unknowns in cyberspace and make cybersecurity less abstract and more tangible. Lauren sits on the CFP board for BSides Kansas City, serves on the board of Urban Trail Co., and tries to escape computers by running long distances in the woods.

Threat Hunting Summit Keynote: Defending AI: Organized Musings on Securing AI Agents for Cybersecurity
2026-06-17 15:30 - 16:20
With Jason Haddix

Register Here

Are you securing your AI agents, or just hoping the system prompt holds?

As AI agents move from prototypes into production, most security programs are still treating them like traditional apps or opaque black boxes – and that gap is where real risk is emerging.

Join Jason Haddix, CEO and “Hacker in Charge” at Arcanum Information Security, as he lays out a practical architecture for defending AI agents based on real-world assessments and organizing controls across the full ecosystem: application design and tool boundaries, system prompt hardening, and intermediate guardrails and classifier-based protections.

He’ll cover how attacks actually manifest across these layers, the best security practices and common missteps seen in development teams, and where open-source defensive tooling fits today.

The focus of this talk is pragmatic: giving defenders a usable mental model, concrete configurations, and the tradeoffs they need to understand to make AI systems survivable in production.

If you’re building or defending AI systems, this is the playbook you’ll want to have.

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Jason Haddix

Bio

Jason Haddix, also known as jhaddix, is the CEO and “Hacker in Charge” at Arcanum Information Security. Arcanum is a world-class assessment and training company.

Jason has had a distinguished 20-year career in cybersecurity, previously serving as CISO of FLARE, CISO of Buddobot, CISO of Ubisoft, Head of Trust/Security/Operations at Bugcrowd, Director of Penetration Testing at HP, and Lead Penetration Tester at Redspin. He has also held positions doing mobile penetration testing, network/infrastructure security assessments, and static analysis. Jason is a hacker and bug hunter and is currently ranked 57th all-time on Bugcrowd’s bug bounty leaderboards. Currently, he specializes in recon, web application analysis, and emerging technologies. Jason has also authored many talks on offensive security methodology, including speaking at conferences such as DEFCON, Bsides, BlackHat, RSA, OWASP, Nullcon, SANS, IANS, BruCon, Toorcon and many more.

Threat Hunting on the Edge
2026-06-18 10:00 - 18:00

LOLBINS vs. LOLBINS: Endpoint Threat Hunting
2026-06-19 10:00 - 18:00

Cyber Threat Intelligence 101 2 Day Version
2026-06-22 10:00 - 2026-06-23 18:00

Intro to Network Threat Hunting
2026-06-24 10:00 - 2026-06-25 18:00

Anti-Cast: Prompt Engineering 201: The Context Stack with Bronwen Aker
2026-06-24 12:00 - 13:00
What separates a so-so AI response from one you can actually rely on?

In this Anti-Cast, Bronwen Aker, AI Researcher at BHIS, will take you beyond prompting fundamentals and move into more advanced prompt techniques designed for real-world use.

Along the way, you’ll see how context, structure, and clearly defined outputs transform inconsistent replies into something dependable and repeatable. That shift means less time fixing results and more confidence in what you produce, whether you’re new or experienced.

The answer isn’t more complexity. It’s knowing how to shape the input so the model delivers exactly what you need.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Agentic AI for Threat Hunting
2026-06-26 10:00 - 18:00

Active Defense and Cyber Deception with John Strand
2026-06-29 12:00 - 2026-07-02 16:00

Anti-Cast: Deploying Emergency Comms with Drones & Mesh with Evan & Luke
2026-07-01 12:00 - 13:00
What if you could restore communications after a disaster using tools you can build, carry, and deploy yourself?

Join Evan Kirstein, Mesh Networking Practitioner & Amateur Radio Operator (KJ5MCN), and Luke Canfield, Tactical UAS Researcher & Defense Systems Analyst, for a free one‑hour Anti-Cast where they’ll walk you through a practical, field‑tested approach to re‑establishing connectivity using two accessible technologies: 3D‑printable FPV airframes and Meshtastic (LoRa) mesh radios.

You’ll learn how to select frames and components, design resilient meshes, navigate the high‑level legal and ethical boundaries, and deploy hardened handheld nodes, elevated antennas, and solar‑backed repeaters to restore situational awareness and coordination when infrastructure fails.

By the end of this session, you’ll have a repeatable blueprint for building and fielding low‑cost, infrastructure‑independent communication systems—an essential capability for incident responders, EMCOMM volunteers, and small‑business continuity teams committed to #DronesForGood.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Anti-Cast: Forensic Investigations: What AI and Analysts Get Wrong with Markus Schober
2026-07-08 12:00 - 13:00
How many forensic reports contain conclusions that the evidence doesn’t actually support?

Join Markus Schober, founder of Blue Cape Security and former enterprise incident responder, demonstrates why both AI and human analysts draw incorrect conclusions from Windows forensic artifacts, and how proper correlation leads to more defensible investigations.

You’ll learn to evaluate artifact confidence, avoid overclaiming findings, and correlate multiple evidence sources to answer the most critical questions in DFIR — what was executed, when, and how.

If you’ve ever relied on single artifacts to support findings, this session will challenge how you think about evidence, strengthen your investigative tradecraft, and help you produce conclusions you can confidently defend.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: CI CD Exploitation and Hardening
2026-07-10 12:00 - 16:00

Practical Windows Forensics: Accelerated
2026-07-14 10:00 - 18:00

Anti-Cast: How to Make OT Risk Impossible to Ignore with Ashley Wolfe
2026-07-15 12:00 - 13:00
Is your OT network one vendor VPN away from a six-day shutdown? Would you even know?

Join Ashley Wolfe, OT/ICS security practitioner and researcher, as she breaks down why OT security proposals keep dying in conference rooms — and how to walk in with something that actually sticks. In one hour, you’ll leave with a threat scenario that fits your industry, a number you can put on inaction, and a first step that doesn’t need budget approval.

You’ve known something was wrong. This hour is about finally being able to prove it.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: IAAA: The Foundations of Access Control
2026-07-17 12:00 - 16:00

Anti-Cast: OSINT Magic Tricks Revealed with Mishaal Khan
2026-07-22 12:00 - 13:00
What happens when you challenge a highly skilled ethical hacker to find something? You get a magic show!

Join Mishaal Khan, ethical hacker and OSINT specialist, as he pulls back the curtain on open-source intelligence in a rapid-fire live demo that turns seemingly impossible searches into repeatable techniques.

You’ll learn Mishaal’s process for finding timely, accurate information online — the same methodology that turns raw searches into actionable intelligence — and come away ready to launch your first investigation.

Want to go deeper? This one-hour webcast serves as a free preview of Mishaal’s 16-hour Next Level OSINT course, where the real magic happens.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: Intro to SDR Hacking: Capture, Decode, Take Over
2026-07-24 12:00 - 16:00

Anti-Cast: Agent UEBA: Applying Data Science to AI Security with Tom Prigg
2026-07-29 12:00 - 13:00
How do you detect an AI agent that’s been compromised before it completes its objective?

Thomas Prigg, AI Incident Response Team lead, explores a new approach to AI threat detection using behavioral drift analysis. By applying data science techniques to AI agent activity, defenders can identify prompt injection, poisoning, malicious adaptation, and other threats earlier than traditional security methods.

Topics include:

Five behavioral drift detection techniques for AI agents

Twenty categories of behavioral drift signals

Early detection of prompt injection and data poisoning

Identifying agent compromise and malicious adaptation

Turning behavioral drift into actionable security telemetry before traditional alerts fire

You’ll learn how to turn behavioral drift into actionable security telemetry before the damage is done.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

How to Turn OT Risk into a Plan
2026-07-31 12:00 - 16:00

Anti-Cast: Job Hunting: In the Age of AI with Jason Blanchard
2026-08-05 12:00 - 13:00
When was the last time you looked for a new job? Before AI? Or is your job hunt happening right now?

Join Jason Blanchard (Black Hills Information Security) for a free one-hour Anti-cast on how to hunt for jobs in the age of AI using the hacker mindset and the tactics of sales and marketing.

You’ll learn how to:

Use AI to research companies

Identify and communicate your skills employers value most

Tailor your resume for every opportunity

Build genuine relationships that lead to interviews

This isn’t about letting AI find you a job. It’s about learning how to think differently, stand out, and connect with the people making hiring decisions.

Your next job won’t come from AI. It’ll come from people. AI just helps you get there faster.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Hacking AI-LLM Applications
2026-08-07 12:00 - 16:00

Summit Keynote: Exfil Everything: A Year of Stealing Data from AI Agents
2026-08-14 10:00 - 10:50
Ads Dawson and Mike Takahashi

Register Here

Your AI agent has the same trust boundary problem your browser had in 2005. Are you sure it’s fixed?

Join Ads Dawson of Dreadnode and Mike Takahashi of Zenity — ranked among the top bug bounty hunters on HackerOne and Mozilla’s AI programs — as they break down a year’s worth of data exfiltration bugs found across production AI applications, showing how the same primitive behind XSS now lets attackers steal PII, business data, and private messages through AI agents.

In under an hour, you’ll see real attack chains from bug bounty reports, learn bypass techniques for every common mitigation, and walk away with a repeatable hunting methodology you can point at any AI target with a bug bounty program.

If you’ve ever exploited a trust boundary in a browser, you already have the instincts. This talk shows you where to point them next.

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Ads Dawson

Bio

Ads Dawson has spent the past year stealing data from AI agents in production — through bug bounty programs. A Staff AI Security Researcher at Dreadnode and member of BT6, the frontier AI red team, he specializes in web application security, adversarial machine learning exploitation, and autonomous red teaming. Ranked #2 in Canada on HackerOne (2026) and #1 Up and Comer (Q4 2025), Ads is a HackerOne Ambassador (US South), BugCrowd Hacker Advisory Board member, and selected for Meta’s MBBRC live hacking event. He founded the OWASP GenAI Security Project — the fastest project to reach OWASP flagship status — and is lead author of AIRTBench (arXiv), the first AI/ML red teaming benchmark for LLMs. His work includes red teaming frontier models for Google DeepMind and shaping the EU AI Act Code of Practice.

Ads Dawson | LinkedIn

https://linktr.ee/adsdawson

Mike Takahashi

Bio

Mike Takahashi, aka TakSec, is an AI Red Team Researcher at Zenity, BT6 member, and Bug Bounty Hunter focused on breaking AI systems. He has submitted 400+ vulnerabilities across major bug bounty programs and top ranking on both Anthropic’s Safety Bug Bounty Program on HackerOne and Mozilla’s 0din GenAI Bug Bounty Program. His work targets prompt injection, data exfiltration, and AI agent security.
Mike Takahashi | LinkedIn

Infosec: Age of AI Summit
2026-08-14 10:00 - 16:30
Summit:

August 14 @ 10:00 am – 4:30 pm EDT

Live Training:

August 17 – 18

REGISTER FOR FREE SUMMIT

REGISTER FOR LIVE TRAINING

–DAYS–HOURS–MINUTES–SECONDS

How do you secure a future that is already here?

AI is changing how organizations operate, how defenders protect systems, and how attackers identify and exploit opportunities. New capabilities, new risks, and new questions are emerging every day. Understanding what we know, what we don’t know, and what questions we should be asking has become one of the most important challenges facing security teams today.

The Antisyphon Training Infosec: Age of AI Summit is a free, six-hour, live virtual event designed to help you better understand the realities of AI and cybersecurity.

You’ll learn from experienced practitioners as they discuss how AI is being used, where organizations are finding value, where security concerns are appearing, and what security professionals need to know as adoption continues to grow.

On August 14, 2026, join us and thousands of fellow security professionals, technology leaders, and aspiring practitioners as expert speakers share practical lessons, real-world experiences, and informed perspectives on one of the most significant changes our industry has faced in decades.

Need AI security training? We’ve got that!

Talk Schedule – All Times Eastern U.S.

Keynote: Exfil Everything: A Year of Stealing Data from AI AgentsAds Dawson and Mike TakahashiAugust 14 @ 10:00 am – 10:50 am ET

Talk: Agentic Coding That Doesn’t Fall ApartEthan RobishAugust 14 @ 11:00 am – 11:25 am ET

Talk: Building Custom Agents That Survive First ContactHayden CovingtonAugust 14 @ 11:30 am – 11:55 am ET

Talk: When AI Lies to Your SOCMolly CorreiaAugust 14 @ 12:00 pm – 12:25 pm ET

Panel: Hunting Shadow AI: Where the Guardrails BelongKip Boyle, Ross Young, Jake Bernstein, and Courtney HansAugust 14 @ 1:00 pm – 1:50 pm ET

Talk: AI Up Your Incident Readiness and Response PlanningGerard JohansenAugust 14 @ 2:00 pm – 2:25 pm ET

Talk: When Your Logs Attack Your Security AgentFaan RossouwAugust 14 @ 2:30 pm – 2:55 pm ET

Talk: Jailbreak the Enterprise: Attacking Agentic AI & LLM InfrastructureAlicia CuestasAugust 14 @ 3:00 pm – 3:25 pm ET

Summit Talk: Build Custom MCP Servers to Arm Your Threat Hunting AgentsMatt FranzAugust 14 @ 3:30 pm – 3:55 pm ET

Summit Panel: Ask Us Anything: Straight Answers on AIJohn Strand, Bronwen Aker, Hayden Covington, Jason Haddix, BB King, and Ashley KnowlesAugust 14 @ 4:00 pm – 4:30 pm ET

Summit Schedule – All Times Eastern U.S.

9:30 – Pre-Show Banter

10:00 – Keynote:Ads Dawson and Mike Takahashi: Exfil Everything: A Year of Stealing Data from AI Agents

10:50 – BREAK AND BANTER

11:00 – Ethan Robish: Agentic Coding That Doesn’t Fall Apart

11:30 – Hayden Covington: Building Custom Agents That Survive First Contact

12:00 – Molly Correia: When AI Lies to Your SOC

12:30 – LUNCH – BHIS Demo – Fusion AI

1:00 – Panel: Hunting Shadow AI: Where the Guardrails Belong w/ Kip Boyle

1:50 – BREAK AND BANTER

2:00 – Gerard Johansen: AI Up Your Incident Readiness & Response Planning

2:30 – Faan Rossouw: When Your Logs Attack Your Security Agent

3:00 – Alicia Cuestas: Jailbreak the Enterprise: Attacking Agentic AI & LLM Infrastructure

3:30 – Matthew Franz: Build Custom MCP Servers to Arm Your Threat Hunting Agents

4:00 – AMA: John Strand & BHIS experts

4:30 – CLOSING REMARKS

Take Your Learning Further with LIVE Hands-On Training

Training Classes Include:

Keeping Things Local: Build Private LLMs for Your TeamBronwen AkerAugust 17 @ 8:00 am – 12:00 pm ET$25

Prompt Engineering with Local LLMsAshley KnowlesAugust 17 @ 1:00 pm – 5:00 pm ET$25

Agentic AI Fundamentals for Cybersecurity ProfessionalsDerek Banks and Brian FehrmanAugust 18 @ 1:00 pm – 5:00 pm ET$25

EXPLORE OUR AI TRAINING

Hacking AI-LLM Applications Derek Banks and Brian FehrmanAugust 7 @ 12:00 pm – 4:00 pm ET$25

Assessing AI Security: Model Context ProtocolJake WilliamsAugust 21 @ 10:00 am – 6:00 pm ET$295

SOC Core Skills in the Age of AIJohn StrandAugust 31 – September 3 @ 12:00 pm – 4:00 pm ET$25-$300

Hunting Shadow AIKip BoyleSeptember 25 @ 12:00 pm – 4:00 pm ET$25

Owning AI Risk: Hands-On PlaybooksKip BoyleOctober 26 – 27 @ 10:00 am – 6:00 pm ET$575

Information Security Core Skills in the Age of AIJohn StrandNovember 10 – 11 @ 10:00 am – 6:00 pm ET$25-$300

Summit Talk: Agentic Coding That Doesn't Fall Apart
2026-08-14 11:00 - 11:25
Ethan Robish

Register Here

How do you get a coding agent to write quality, well-architected code instead of a teetering house of cards?

Join Ethan Robish, Black Hills Infosec former pentester and current SOC architect, for a technical session on the scaffolding, guardrails, and processes that turn agentic coding from a novelty into a production-grade workflow.

You’ll learn how to write specs your agent can actually execute, enforce test-driven development from the first prompt, codify domain knowledge into reusable skills around the APIs and tools you depend on, and apply the checks and balances that keep AI-generated codebases maintainable instead of disposable.

Whether you’re shipping side projects or production systems, you’ll walk away with a repeatable blueprint for building real software with agents — not just demos.

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Ethan Robish

Bio

Ethan Robish has spent over a decade at Black Hills Information Security wearing a variety of hats — breaking into networks as a Penetration Tester, hunting attackers across them as a Threat Hunter, writing the tools he wished he had as a Software Developer, engineering the detections that catch real intrusions, and now, as SOC Architect, designing the automation and triage pipelines that power the BHIS SOC. His current focus is building production-grade systems with AI coding agents, codifying the specs, tests, and guardrails that turn agentic coding from a novelty into a dependable engineering practice.
Ethan Robish | LinkedIn
Discord: @ethack

Summit Talk: Building Custom Agents That Survive First Contact
2026-08-14 11:30 - 11:55
Hayden Covington

Register Here

What if the problem with AI in security is not that teams need better prompts, but that we keep asking general-purpose assistants to survive workflows they were never designed for?

In this session, Hayden Covington, Associate Director of Security Operations at the BHIS SOC, will walk through how to design custom agents for real security operations work: triage support, detection engineering, enrichment workflows, reporting, research, and review-heavy operational tasks. The focus is not magic prompts or over-engineered instructions; it is the engineering work behind useful agents. Powerful agents have clear roles, bounded authority, durable memory, tool access, handoff points, review gates, and failure modes that operators can actually relate to.

Attendees will leave with a practical design model for building agents that make an impact with minimal prompting effort, accelerate workflows without hiding risk, and fit into the way security teams already work. The goal is to move from prompt experimentation to repeatable agent design that can survive real operational pressure.

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Hayden Covington

Bio

Hayden Covington is a Security Operations leader, Detection Engineer, and Instructor who serves as the Associate Director of Security Operations at Black Hills Information Security. With nearly a decade of hands-on experience in Security Operations, Detection Engineering, and Incident Response, he specializes in building and running high-performing blue teams.

Hayden began his security career as a SOC Analyst at Newport News Shipbuilding (Huntington Ingalls Industries), where he worked on the incident response team and later focused on insider threat analysis and SOAR engineering. At BHIS, Hayden leads detection engineering efforts, develops and operationalizes threat intelligence processes, and oversees day-to-day SOC operations across a diverse customer base. His work centers on designing high-fidelity detections, reducing analyst noise, and building workflows that allows defenders move quickly and confidently during investigations.
Hayden Covington | LinkedIn
Discord: @nynir

Summit Talk: When AI Lies to Your SOC
2026-08-14 12:00 - 12:25
Molly Correia

Register Here

What happens when AI confidently recommends the wrong security action in your IT environment, or on your plant floor?

Join Molly Correia, cybersecurity consultant, as she turns a virtual talk into a live experiment: you’ll prompt your preferred AI model — ChatGPT, Claude, Gemini, Copilot, or whichever model your team relies on — to analyze a real-world CVE, then compare results against authoritative sources to see exactly where the models hallucinate facts, recommendations, and unsupported conclusions.

You’ll walk away knowing how to distinguish confidence from correctness, why AI outputs require validation before they drive operational decisions, and how an AI Assurance Control can help your SOC measure trustworthiness before AI becomes a security control.

Before AI becomes a security control, it needs one.

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Molly Correia

Bio

Molly Wellesly Correia is a Sr. Security Engineer at Consolidated Edison, protecting critical infrastructure, with more than six years’ experience in cybersecurity, spanning OT/ICS environments, network detection, and enterprise security. She holds an M.S. in Cyber Security and Privacy from NJIT.
Molly Correia | LinkedIn

Summit Panel: Hunting Shadow AI: Where the Guardrails Belong
2026-08-14 13:00 - 13:50
Kip Boyle, Ross Young, Jake Bernstein, and Courtney Hans

Register Here

How much of your company’s data is already sitting inside an AI tool nobody approved?

This panel moderated by Kip Boyle brings together two hands-on AI security pros, a privacy and AI attorney, and a cyber-insurance expert to work through where the guardrails actually belong and who owns them once they’re set.

You’ll leave knowing how to let your people use AI productively without leaking data or letting business grind to a halt.

Bring your toughest questions: the panel will open the floor for live Q&A so you can finally get straight answers to your shadow AI questions.

AI is already in your environment. This is the panel that tells you what to do about it.

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

Kip Boyle will teach the workshop Hunting Shadow AI on Sept. 25.

About the Instructor

Kip Boyle

Bio

Kip Boyle is a husband, dad, small business owner, and experienced cybersecurity hiring manager. Over the years, Kip has built many InfoSec teams in a variety of settings including as a captain on active duty in the US Air Force, as the CISO of PEMCO Insurance in Seattle, and vCISO in his own company, Cyber Risk Opportunities LLC. Kip is the primary author and leader of the open source “Cybersecurity Hiring Manager Handbook.” He’s also the co-host of “The Cyber Risk Management Podcast” and the co-host of the “Your Cyber Path” podcast.

Ross Young

Bio

From CIA intelligence officer to CISO, Ross Young has spent more than two decades pushing the boundaries of cybersecurity.

Ross is the CEO of Clear Capabilities Inc., co-host of CISO Tradecraft, author of Cybersecurity’s Dirty Secret: Why Most Budgets Go to Waste, creator of the OWASP Threat and Safeguard Matrix (TaSM), and a seasoned cybersecurity executive. He has served as CISO in Residence at Team8, CISO of Caterpillar Financial, and an instructor at Johns Hopkins University. Previously, Ross was a divisional CISO at Capital One and spent more than a decade in cybersecurity roles at the CIA, NSA, and the Federal Reserve Board.

Jake Bernstein

Bio

Jake Bernstein is the Global AI and Innovation Partner at K&L Gates, where he practices in the firm’s Technology Transactions and Sourcing and Data Protection, Privacy, and Security groups. A Certified Information Systems Security Professional (CISSP), he advises clients at the intersection of cybersecurity, privacy, and emerging technology. Jake began his career as an Assistant Attorney General in the Washington State Attorney General’s Consumer Protection Division, where he spent nearly eight years leading cybersecurity, privacy, and consumer-protection investigations. He is recognized by Chambers USA for Privacy & Data Security (Nationwide) and was named to the 500 Leading Global Cyber Lawyers in 2024 and 2025. He is based in Seattle.

Courtney Hans

Bio

Currently the Vice President of Cyber Services for ANV Cyber, Courtney Hans brings a variety of experience into her engagements via her ability to unite a command of business strategy with the ability to lead technical work. In her early career, Courtney was an adventure travel guide with a short window to make a strong impression. Curiosity became her superpower as she learned how to uncover the inner motivation of diverse groups of guests. Guiding, just like cybersecurity, requires agility and a cool head during a crisis. Formerly the Head of Security and IT for a rapid-growth SaaS startup, Courtney joined ANV to help reduce risk and strengthen the partnership between carrier and insured.

Courtney Hans | LinkedIn

Summit Talk: AI Up Your Incident Readiness and Response Planning
2026-08-14 14:00 - 14:25
Gerard Johansen

Register Here

Do you dread writing incident response documentation?
Gerard Johansen of IR Proactive shows how LLMs can quickly create, refine, and validate incident response policies, plans, workflows, and communications playbooks.

Topics include:

Why LLMs are effective for IR documentation

Getting set up: Local vs Cloud

Prompting for policies, plans, workflows, and communications

Reviewing, testing, and validating outputs

You’ll learn practical methods to create and maintain incident response documentation faster and with less effort.

Chat with your fellow AI Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of Antisyphon Training’s Infosec: Age of AI Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber experts are using AI and what security professionals need to know as adoption grows.

For those who want to go further, high-quality, affordable hands-on workshops are available Aug. 17-18 to help you learn AI security concepts, techniques, and tactics.

Learn more about the AI Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Gerard Johansen

Bio

A cyber security professional with over a decade of experience specializing in digital forensics, incident response, and threat intelligence. After a decade in law enforcement, transitioned into the private sector working in large enterprise and consulting. During my tenure in cyber security, I have been fortunate enough to work on complex digital investigations as well as develop training and enablement programs for cyber security defenders all over the world.
Gerard Johansen | LinkedIn
