Antisyphon Training

Assumed Compromise: A Methodology with Detections and Microsoft Sentinel with Alyssa Snow and Kaitlyn Wimberley
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Breaching the Cloud with Beau Bullock
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Building a C2 Framework in Go with Faan Rossouw
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Defending M365 and Azure with Kevin Klingbile
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Foundations of Security Operations with Hayden Covington
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Offense for Defense with Mike Saunders and Corey Overstreet
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Next Level OSINT with Mishaal Khan
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Network Forensics and Incident Response with Troy Wojewoda
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Modern Webapp Pentesting with BB King
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Hacking Active Directory: Fundamentals and Techniques with Dale Hobbs
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Offensive Tooling for Operators with Chris Traynor
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Penetration Testing: Beyond the Basics with Tim Medin
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Secure Coding & API Hardening: Hands-On Secure Design, Development, and Threat Modeling with Tanya Janca
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Practical iOS Application Security Testing with Cameron Cartier and Dave Blandford
2026-02-10 08:30 - 2026-02-11 17:00 (America/Denver)

Anti-Cast: Adapting to Active Directory Security Enhancements with Eric Kuehn
2026-02-18 12:00 - 13:00 (America/New_York)
Are your go-to Active Directory attacks quietly failing without you noticing?

Join Eric Kuehn, Principal Security Consultant at Secure Ideas, for a free one-hour training session that takes a deep dive into the security enhancements Microsoft has introduced to Active Directory over the past few years and how they are reshaping the way penetration testers and defenders operate.

You’ll learn how long-reliable attack paths now break, how successful attacks may leave new and unexpected traces, and what these changes mean for staying stealthy during an engagement.

Eric will teach you the latest AD hardening features, the new detection opportunities they create, and the practical changes testers and defenders can make to improve their tradecraft right away.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Cybersecurity Foundations
2026-02-23 12:00 - 2026-02-26 16:00 (America/New_York)

Anti-Cast: Red Teaming AI: OWASP LLM Top 10 with Brian and Derek
2026-02-25 12:00 - 13:00 (America/New_York)
Join AI researchers Brian Fehrman and Derek Banks for a free one-hour training session that breaks down the OWASP Top 10 AI-LLM risks clearly and practically.

You’ll learn in this Antisyphon Anti-cast how LLM security issues show up in real systems, how attackers test them, and what to focus on to secure AI applications with a practical, security-first mindset.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Preparing IR for AI Incidents with Gerard Johansen
2026-03-04 12:00 - 13:00 (America/New_York)
Is your Incident Response plan AI ready?

Join us for a free one-hour training session with incident management expert and instructor Gerard Johansen, where he’ll teach how to adapt your Incident Response plan to AI-related risks and threats.

You’ll learn how AI incidents actually happen and how to respond to them.

Gerard will also cover what to include in your incident response plan so you’re prepared as your organization adopts AI.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: Hacking AI-LLM Applications
2026-03-06 12:00 - 16:00 (America/New_York)

Workshop: Job Hunt Like a Hacker - 2026 Edition
2026-03-10 10:00 - 16:00 (America/New_York)

Anti-Cast: How to Detect Malicious Remote Workers with James McQuiggan
2026-03-11 12:00 - 13:00 (America/New_York)
Could a nation-state threat actor get hired and stay invisible to your SOC?

Join us for a free one-hour training session with James McQuiggan, CISSP and Advisory CISO, as he teaches you the full lifecycle of North Korea’s AI-enabled IT worker operation, from AI-generated identities and U.S.-based laptop farms to the data theft and extortion that follow once they’re inside.

You’ll learn a practical detection and hunting playbook covering behavioral anomalies, identity red flags, and post-hire SOC indicators that catch what background checks miss.

If your SOC isn’t hunting for threats that were hired legitimately, this Antisyphon Anti-cast will change that.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: Foundations of Dynamic Analysis for AppSec
2026-03-13 12:00 - 16:00 (America/New_York)

Attacking, Defending, and Leveraging AI-LLM Systems
2026-03-16 10:00 - 2026-03-17 18:00 (America/New_York)

Professionally Evil CISSP Mentorship Program
2026-03-17 14:00 - 2026-05-19 16:00 (America/New_York)

Anti-Cast: Securing the Cloud in the Age of AI with Andrew Krug
2026-03-18 12:00 - 13:00 (America/New_York)
Existential Courage: The Hitchhiker’s Guide to Surviving AI in Cloud

Can AI really help secure the cloud, or is it quietly making things worse?

Join Antisyphon instructor and security researcher Andrew Krug for a free one-hour Anti-cast on what really happens when AI collides with cloud security.

Andrew will cut through the hype and look at how LLMs affect IAM, monitoring, governance, and real-world risk.

Learn where AI helps, where it hallucinates, and how to defend cloud environments without panic.

Expect practical insights, grounded strategy, and a bit of cosmic humor. Bring your towel. Don’t panic.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Red Team Fundamentals for Active Directory
2026-03-23 10:00 - 2026-03-24 18:00 (America/New_York)

SOC Summit Talk: Needle Hunting: An Endpoint Investigation Cheat Sheet
2026-03-25 10:00 - 10:25 (America/New_York)
With Patterson Cake

How do you investigate – let alone understand – an endpoint operating system with more than 50 million lines of code?

Join Patterson Cake, Black Hills Infosec Director of Incident Response, for a technical session outlining a prioritized approach to endpoint investigations, focusing on where and how unauthorized access and activity impact Windows and Linux.

You’ll learn about the endpoint “attack surface,” prioritization of operating-system artifact selection, suggested workflow for artifact acquisition, and a methodology for identification of indicators of compromise.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Patterson Cake will be teaching his Incident Response Simplified class on April 3.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Patterson Cake

Bio

Patterson Cake joined the Black Hills Information Security (BHIS) pirate ship in June of 2023 as a Security Analyst focusing primarily on detection engineering and digital forensics and incident response. He chose BHIS because, to paraphrase, “doing cool stuff with cool people” and “making the world a better/safer place” is exactly how he wants to spend his professional time and energy. It also helps that he has a bit of history with a couple of awesome folks that have been with BHIS for many moons. Prior to joining the team, Patterson helped build and lead a DFIR practice for an MSSP, worked as a senior security engineer for AWS Managed Services, and spent several years in enterprise cybersecurity, often healthcare related, focusing on intermingling offensive security and incident response in technical and leadership roles. Outside of work, he enjoys spending time with his family, which often involves motorcycles, outdoor sports, movies, and music.

SOC Summit
2026-03-25 10:00 - 16:00 (America/New_York)
Summit:

March 25 @ 10:00 am – 4:00 pm EDT

Live Training:

March 26 – April 10

REGISTER FOR SUMMIT ONLY

REGISTER FOR LIVE TRAINING

Security Operations Centers are where defenders grow, pressure is real, and impact matters.

The Antisyphon Training SOC Summit is a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

On March 25th, 2026, join thousands of security practitioners and aspiring defenders from across the community as experienced professionals break down day-to-day SOC life, essential technical skills, and career insights to help you break in, level up, or pivot with confidence.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses will be available after the Summit to help you deepen your skills and become more effective at protecting what matters most.

Summit Schedule – All Times Eastern U.S.

9:30 – PreShow Banter

10:00 – Patterson Cake – Needle Hunting: An Endpoint Investigation Cheat Sheet

10:30 – Seth Williams – Practical Email Forensics with EML Analyzer

11:00 – Ashley Knowles – Using Pentest Findings to Improve Detections

11:30 – Wade Wells – Augmented Detection Engineering

12:00 – Ched Wiggins – Static Email Analysis

12:30 – Bruce Potter – How UI/UX Impacts SOC Performance

1:00 – Troy Wojewoda – Detecting Malware with YARA Rules

1:30 – LUNCH BREAK

2:00 – Santiago Bassett – Proactive Threat Prevention with Wazuh

2:30 – Dan Rearden – One Sigma to Rule Them All

3:00 – Hayden Covington – From Cyber Threat Intelligence (CTI) to Detection

3:30 – Carrie Roberts – Validate Security Controls with Atomic Red Team

4:00 – CLOSING REMARKS

Talk Schedule – All Times Eastern U.S.

SOC Summit Talk: Needle Hunting: An Endpoint Investigation Cheat SheetPatterson CakeMarch 25 @ 10:00 am – 10:25 am EDT

SOC Summit Talk: Practical Email Forensics with EML AnalyzerSeth WilliamsMarch 25 @ 10:30 am – 10:55 am EDT

SOC Summit Talk: Using Pentest Findings to Improve DetectionsAshley KnowlesMarch 25 @ 11:00 am – 11:25 am EDT

SOC Summit Talk: Augmented Detection EngineeringWade WellsMarch 25 @ 11:30 am – 11:55 am EDT

SOC Summit Talk: Static Email AnalysisChed WigginsMarch 25 @ 12:00 pm – 12:25 pm EDT

SOC Summit Talk: How UI/UX Impacts SOC PerformanceBruce PotterMarch 25 @ 12:30 pm – 12:55 pm EDT

SOC Summit Talk: Detecting Malware with YARA RulesTroy WojewodaMarch 25 @ 1:00 pm – 1:25 pm EDT

SOC Summit Talk: Proactive Threat Prevention with WazuhSantiago BassetMarch 25 @ 2:00 pm – 2:25 pm EDT

SOC Summit Talk: One Sigma to Rule Them AllDan ReardenMarch 25 @ 2:30 pm – 2:55 pm EDT

SOC Summit Talk: From Cyber Threat Intelligence (CTI) to DetectionHayden CovingtonMarch 25 @ 3:00 pm – 3:25 pm EDT

SOC Summit Talk: Validate Security Controls with Atomic Red TeamCarrie RobertsMarch 25 @ 3:30 pm – 3:55 pm EDT

Take Your Learning Further with LIVE Hands-On Training

Training Classes Include:

Cybersecurity Incident CommandGerard JohansenMarch 26-27 @ 10:00 am – 6:00 pm EDT$575

Network Forensics and Incident ResponseTroy WojewodaMarch 30-31 @ 10:00 am – 6:00 pm EDT$575

Securing the Cloud: FoundationsAndrew KrugApril 1-2 @ 10:00 am – 6:00 pm EDT$575

Incident Response SimplifiedPatterson CakeApril 3 @ 10:00 am – 6:00 pm EDT$295

SOC Core Skills with John StrandJohn StrandApril 6-9 @ 12:00 pm – 4:00 pm EDT$25-$300

Workshop: SOC Detection Engineering Crash CourseHayden CovingtonApril 10 @ 12:00 pm – 4:00 pm EDT$25-$300

Have a Training Budget?

We have reimbursement form templates specially crafted for our SOC Summit training offerings!

Cybersecurity Incident Command – Template

Incident Response Simplified – Template

Network Forensics and Incident Response – Template

Securing the Cloud Foundations – Template

Why Attend Antisyphon Training Events?Antisyphon Training Summits are built on a commitment to fostering community and engagement. Our events encourage connections between attendees, instructors, and industry leaders. Join us to learn, collaborate, and grow your network in the cybersecurity community.

SOC Summit Talk: Practical Email Forensics with EML Analyzer
2026-03-25 10:30 - 10:55 (America/New_York)
With Seth Williams

When you’re handed a suspicious email, how do you investigate what it is really doing?

In this 25-minute technical presentation, Seth Williams will walk through hands-on email forensics using Sublime Security’s free EML Analyzer, teaching you how to break down raw email files to uncover the true mechanics of phishing, malware delivery, and social engineering attacks.

You’ll learn how to quickly review headers, authentication results, URLs, attachments, and metadata to validate detections, explain why an email is dangerous, and confidently decide when to escalate or close alerts and user reports.

Sharpen your email analysis skills and improve triage with evidence-based investigations.

EML Analyzer – Sublime Security

We invited Seth and Sublime Security to present because their free tool can help you improve your suspicious email investigations today.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Seth Williams

Bio

Seth Williams is the Global Partner CTO at Sublime Security, where he builds and scales partner ecosystems across MSSPs, VARs, GSIs, and technical alliances, helping partners and customers achieve real-world security outcomes. With a career that spans federal and commercial security architecture, large-scale SIEM operations, professional services leadership, and security strategy, Seth brings a practical understanding of how security actually works in the field. He focuses on clear technical alignment, cutting through complexity, and turning advanced security capabilities into straightforward, dependable solutions that partners can deliver confidently.

SOC Summit Talk: Using Pentest Findings to Improve Detections
2026-03-25 11:00 - 11:25 (America/New_York)
With Ashley Knowles

Are your pentest reports actually helping you make your detections better?

Penetration tests reveal more than exploited or identified vulnerabilities. They can also expose blind spots in visibility and detections.

Join Ashley Knowles, a Black Hills InfoSec Security Consultant, for a 25-minute technical presentation where she will draw on real-world penetration testing experience to help you close coverage gaps.

You’ll learn how to turn penetration test findings into actionable improvements for alerting, coverage, and detections.

Register Here

Chat with your fellow SOC Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training SOC Summit, a free, 6-hour, live virtual event designed to give you an honest, practical look at what it’s really like to work in a SOC.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available March 26-April 10 to help you deepen your skills and become more effective at protecting what matters most.

Learn more about the SOC Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Ashley Knowles

Bio

Ashley Knowles joined Black Hills Information Security (BHIS) in Fall 2021. As a Security Consultant, Ashley’s role is to perform network (internal/external), social engineering, and cloud penetration tests, as well as participating in red team assessments. Since joining the infosec community in 2013, she has developed and taught hacking classes, worked as a security consultant, and been a team lead on a red team. Ashley serves as a mentor at a local high school’s cybersecurity class and, as someone who loves to learn and teach, she looks forward to developing and teaching classes that add to BHIS’s educational catalogue. In her free time, Ashely enjoys photography, hiking and exploring new places with her kids, and building Legos.
