SOC Summit Talk: From Cyber Threat Intelligence (CTI) to Detection
2026-03-25 15:00 - 15:25 (America/New_York)
With Hayden Covington

How do you go from reading a threat intel report to deploying a working detection?

Join Hayden Covington, Black Hills Infosec SOC SecOps Lead, for a technical session on the practical workflow of transforming threat intelligence into detections.

You’ll learn how to extract the detection logic buried in CTI reports, translate it into queries your SIEM understands, and validate that it actually works.

Walk away with a clear method you can apply the next time a new threat report hits your desk.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Hayden Covington will be teaching his SOC Detection Engineering Crash Course on April 10.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Hayden Covington

Bio

Hayden Covington is a Senior Analyst in Black Hills Information Security’s SOC where he specializes in training, quality assurance, detection engineering, and investigative analysis. With a previous background as a SOC analyst for a US naval contractor, Hayden has extensive experience in Digital Forensics and Incident Response (DFIR), Security Orchestration, Automation, and Response (SOAR), and insider threat.

SOC Summit Talk: Validate Security Controls with Atomic Red Team
2026-03-25 15:30 - 15:55 (America/New_York)
With Carrie Roberts

Do you actually know if your security tools will trigger when it matters most, or are you just hoping they will?

In this 25-minute technical presentation, Carrie Roberts (Senior Distinguished InfoSec Engineer) will teach you how to leverage the power of the open-source Atomic Red Team library to execute scripted, realistic cyber-attacks within your own environments.

You’ll learn how to move beyond assumptions by empirically validating your defenses, confirming that alerts fire as expected, and pinpointing critical coverage gaps before an adversary exploits them.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Carrie Roberts

Bio

Carrie Roberts is a programmer, turned pentester, turned red teamer, turned blueish purple. She is currently on the Red Team at Walmart. She loves to learn and give back to the community. She is one of the primary Atomic Red Team project maintainers and developers and has developed many of her own open-source tools. She holds master’s Degrees in both Computer Science and Information Security Engineering.

Carrie Roberts

Cybersecurity Incident Command
2026-03-26 10:00 - 2026-03-27 18:00 (America/New_York)

Network Forensics and Incident Response
2026-03-30 10:00 - 2026-03-31 18:00 (America/New_York)

Securing the Cloud: Foundations
2026-04-01 10:00 - 2026-04-02 18:00 (America/New_York)

How to Write SOC Tickets That Build Trust and Drive Action with Dan Rearden
2026-04-01 12:00 - 13:00 (America/New_York)
What does the ideal SOC ticket look like?

Technical skills matter, but clear communication is just as important.

Join SOC Analyst Dan Rearden for a free one-hour Antisyphon Anti-cast on using soft skills to level up your tickets.

Learn how to make alerts clear, findings impactful, and documentation useful now and later.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Incident Response Simplified
2026-04-03 10:00 - 18:00 (America/New_York)

SOC Core Skills with John Strand
2026-04-06 12:00 - 2026-04-09 16:00 (America/New_York)

Anti-Cast: The Absolute Truths of Cybersecurity with Doc Blackburn
2026-04-08 12:00 - 13:00 (America/New_York)
DANGER AHEAD.

In this bold, no-nonsense talk, instructor Doc Blackburn will reveal the Absolute Truths of Cybersecurity, hard realities that challenge everything you think you know about “being secure.”

Join us for a free one-hour training session to learn why security isn’t a product, why prevention is a fantasy, why encryption fixes almost nothing, and why your biggest risk might be you.

You’ll learn to see your role differently — not as a gatekeeper, but as a mission-enabler, risk translator, and resilience builder.

This Anti-Cast isn’t about firewalls or frameworks. It’s a total reset on how we view cybersecurity.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: SOC Detection Engineering Crash Course
2026-04-10 12:00 - 16:00 (America/New_York)

Professionally Evil API Testing: AAA and Keys are Not Just for Cars
2026-04-14 12:00 - 16:00 (America/New_York)

Anti-Cast: Turn Ideas into Code with GitHub Copilot with Carrie Roberts
2026-04-15 12:00 - 13:00 (America/New_York)
What if you could build tools, automate tasks, and write real code without ever having called yourself a developer?

Join us for a free one-hour training session with instructor Carrie Roberts, Developer and InfoSec Engineer, as she teaches you how GitHub Copilot is changing what it means to “know how to code” and show you how to put it to work in your browser right now, with no setup required.

You’ll learn how to use Copilot to generate, debug, and refactor code through hands-on demos, including how to assign tasks directly from GitHub without ever opening an editor, so you can start building things that actually work faster than you ever thought possible.

Whether you’re an experienced developer looking to move faster or someone who’s never written a line of code, this Antisyphon Anti-Cast will change how you think about what you can build.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: How to Think Like a Cybersecurity Defender
2026-04-17 12:00 - 16:00 (America/New_York)

Information Security Core Skills™
2026-04-21 09:00 - 2026-04-22 18:00 (Europe/Vienna), 2026-05-11 12:00 - 2026-05-14 16:00 (America/New_York)

Intro to Penetration Testing of Non-Western IT Infrastructures
2026-04-21 09:00 - 2026-04-22 18:00 (Europe/Vienna)

AI for Cybersecurity Professionals
2026-04-21 09:00 - 2026-04-22 18:00 (Europe/Vienna)

Anti-Cast: Investigating Nix Endpoints for Incident Response with Patterson Cake
2026-04-22 12:00 - 13:00 (America/New_York)
How many endpoint Operating Systems are there?

SPOILER alert – the answer is two!

Join Patterson Cake, Director of Incident Response at Black Hills Infosec, as he guides through his “rapid endpoint investigations” workflow for the “other” (not Windows) Operating System…*Nix (Linux/Mac).

We’ll learn how to select, acquire, and analyze Linux and Mac investigative artifacts, using Velociraptor offline collector, CatScale, and UAC scripts.

Windows gets a lot of attention and rightfully so!

However, Linux and Mac are part of every enterprise ecosystem and represent a critical attack surface. You need a simple, effective, repeatable plan for investigating these endpoints.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Anti-Cast: How to Break Free from the Cybersecurity Burnout Trap with Natalia Samman
2026-04-29 12:00 - 13:00 (America/New_York)
Have you ever wondered how to mentally and professionally succeed through all the stress of cybersecurity?

Join Natalia Samman, licensed psychotherapist-turned-burnout-coach and cybersecurity specialist, for an hour of practical tools on how to ditch the stress, stay ahead of your workload, and stop dreading Mondays.

You’ll learn:

Early signs of burnout and when it’s time to take evasive action

Why cybersecurity is uniquely vulnerable to burnout…and how to systematically neutralize the threats

Actionable, science-driven tools to prevent burnout at its root causes

This Anti-Cast will feature a live coaching demo with a Black Hills Infosec pentester, showcasing exactly how to implement boundaries and systems into your own life.

If stress and overwhelm are starting to seep into your career and your life, and you’re ready to live differently, this Anti-Cast is for you.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

About the Instructor

Natalie Samman

Bio

Natalia Samman is on a mission to save the world from burnout. A licensed clinical social worker, coach, facilitator, and keynote speaker, Natalia teaches the tools out of her “therapist toolbox” to the corporate world.

The results? Employees who can maximize performance while managing stress; leaders who are able to connect with, optimize, and motivate their teams; and families who are able to have their beloved, overworked, high-achievers finally back at the dinner table by 6 pm.

Her workshops are highly actionable, with easy-to-digest scientific concepts combined with hilarious storytelling (at least she thinks so!). Participants walk away with a better understanding of the psychology of burnout, and customized tools they can implement immediately to regain control of their culture, workload, and stress.

Workshop: Rapid Endpoint Investigations for Linux and Mac
2026-05-01 12:00 - 16:00 (America/New_York)

Workshop: Job Hunt Like a Hacker - 2026 Edition
2026-05-05 10:00 - 16:00, 2026-06-02 10:00 - 16:00 (America/New_York)

Anti-Cast: Turn Cybersecurity Headlines into Action with Wade Wells
2026-05-06 12:00 - 13:00 (America/New_York)
How do you turn cybersecurity news into actionable defense?

Join Wade Wells, Staff Detection Engineer, for a free one-hour training where he’ll teach you a practical system to evaluate cybersecurity news, vendor reports, and threat intel.

You’ll learn to spot bias, assess credibility, and turn what you read into actionable defensive steps.

By the end of this Anti-Cast, you’ll have a repeatable framework to separate signal from noise, prioritize what matters, and make smarter security decisions.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Anti-Cast: How to Build a Bulletproof Pretext with Alethe Denis
2026-05-13 12:00 - 13:00 (America/New_York)
What if your pretext falls apart the moment someone challenges you?

Join Alethe Denis, DEF CON Black Badge-winning social engineer and Senior Security Consultant II at Bishop Fox, as she breaks down how to build pretexts that hold up under real-world pressure in physical red team engagements.

Most social engineering training teaches you what to say. This session teaches you how to construct a story that survives a skeptical receptionist, an unexpected escort, or a question you didn’t prepare for.

If you’ve ever wondered what separates a pretext that gets you through the door from one that gets you walked out by security, this is where that conversation starts.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: Threat Actor Profiling: Know Your Enemy
2026-05-15 12:00 - 16:00 (America/New_York)

Anti-Cast: Red Teaming: Bypass, Evade, and Exploit with Corey Overstreet
2026-05-20 12:00 - 13:00 (America/New_York)
How do attackers slip past defenses even when you think you’ve closed every obvious gap?

Join Corey Overstreet, Senior Security Consultant at Red Siege, for a free one hour training session on how red teamers quietly bypass controls, evade detection, and exploit common tools in subtle and creative ways.

Learn why simple techniques often outperform complex ones, how environmental differences impact success, and what patterns defenders should watch for.

This Antisyphon Anti-Cast will give you practical, real-world insight to sharpen red and blue team tradecraft, because it is only stealthy until you know where to look.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: Hands on Kerberos
2026-05-22 12:00 - 14:30 (America/New_York)

Anti-Cast: Threat Hunting in the Agentic Age with Faan Rossouw
2026-05-27 12:00 - 13:00 (America/New_York)
What if threat hunting was always the most effective approach to improving security posture – it just couldn’t scale?

Join Faan Rossouw, creator of aionsec.ai, as he walks you through how agentic AI removes the constraint that limited threat hunting’s impact for over a decade and what that means for how you build, design, and hunt.

You’ll learn about the three capabilities every practitioner needs to operate in the AI era: building your own tools with agents, engineering the harness that makes agents effective, and the practice of actually hunting with agents at your side.

If you’ve been watching the agentic wave and wondering what it actually looks like applied to threat hunting – not chatbot demos, real architecture – this Anti-Cast is for you.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: How to Build Pressure-Proof Pretexts
2026-05-29 12:00 - 16:00 (America/New_York)

Anti-Cast: How Hackers Attack CI/CD Pipelines with Phil Miller
2026-06-03 12:00 - 13:00 (America/New_York)
How well do you know your Continuous Integration / Continuous Delivery (CI/CD) pipelines?

CI/CD pipelines often hold the keys to the kingdom. They store credentials, deploy to production, and run code with more privilege than most teams realize.

Attackers know this.

The question is whether your team does, too.

Join Phil Miller for a free one-hour training on using CI/CD across the Software Development Lifecycle (SDLC) to build offensive security tools, then learn how those same pipelines can be attacked.

You’ll build real pipelines in GitHub Actions and GitLab CI/CD, then break them by exfiltrating secrets, injecting scripts through pull request titles, pivoting across runners, and poisoning supply chains.

You’ll learn through live labs, not slides, and leave with both the attacker’s playbook and the defender’s toolkit to secure CI/CD infrastructure.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!
