Anti-Cast: Red Teaming: Bypass, Evade, and Exploit with Corey Overstreet
2026-05-20 12:00 - 13:00 (America/New_York)
How do attackers slip past defenses even when you think you’ve closed every obvious gap?

Join Corey Overstreet, Senior Security Consultant at Red Siege, for a free one hour training session on how red teamers quietly bypass controls, evade detection, and exploit common tools in subtle and creative ways.

Learn why simple techniques often outperform complex ones, how environmental differences impact success, and what patterns defenders should watch for.

This Antisyphon Anti-Cast will give you practical, real-world insight to sharpen red and blue team tradecraft, because it is only stealthy until you know where to look.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: Hands on Kerberos
2026-05-22 12:00 - 14:30

Anti-Cast: Threat Hunting in the Agentic Age with Faan Rossouw
2026-05-27 12:00 - 13:00
What if threat hunting was always the most effective approach to improving security posture – it just couldn’t scale?

Join Faan Rossouw, creator of aionsec.ai, as he walks you through how agentic AI removes the constraint that limited threat hunting’s impact for over a decade and what that means for how you build, design, and hunt.

You’ll learn about the three capabilities every practitioner needs to operate in the AI era: building your own tools with agents, engineering the harness that makes agents effective, and the practice of actually hunting with agents at your side.

If you’ve been watching the agentic wave and wondering what it actually looks like applied to threat hunting – not chatbot demos, real architecture – this Anti-Cast is for you.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: How to Build Pressure-Proof Pretexts
2026-05-29 12:00 - 16:00

Workshop: Job Hunt Like a Hacker - 2026 Edition
2026-06-02 10:00 - 16:00

Anti-Cast: How Hackers Attack CI/CD Pipelines with Phil Miller
2026-06-03 12:00 - 13:00
How well do you know your Continuous Integration / Continuous Delivery (CI/CD) pipelines?

CI/CD pipelines often hold the keys to the kingdom. They store credentials, deploy to production, and run code with more privilege than most teams realize.

Attackers know this.

The question is whether your team does, too.

Join Phil Miller for a free one-hour training on using CI/CD across the Software Development Lifecycle (SDLC) to build offensive security tools, then learn how those same pipelines can be attacked.

You’ll build real pipelines in GitHub Actions and GitLab CI/CD, then break them by exfiltrating secrets, injecting scripts through pull request titles, pivoting across runners, and poisoning supply chains.

You’ll learn through live labs, not slides, and leave with both the attacker’s playbook and the defender’s toolkit to secure CI/CD infrastructure.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Anti-Cast: RF Attacks Every InfoSec Pro Should Know with Paul Clark
2026-06-10 12:00 - 13:00
Did you know that billions of wireless devices in homes, offices, and industrial facilities transmit in plaintext, with no encryption and no authentication?

Join Paul Clark, co-author of Practical SDR, as he demonstrates how to capture, decode, and retransmit a wireless signal to take control of a real device — cutting power to a wirelessly-controlled outlet the same way an attacker would disable a sensor, lock, or other building system.

You’ll see the full RF attack chain, from spectrum recon to replay exploit, and learn how to start adding wireless testing to your physical security engagements.

This is the attack surface your clients may not know exists and your competitors probably aren’t testing.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: Build Your Own AI Security Agent
2026-06-12 12:00 - 16:00

Defending M365 & Azure
2026-06-15 10:00 - 2026-06-16 18:00

Threat Hunting Summit Keynote: Is It Time to Embrace Automated Threat Hunting?
2026-06-17 10:00 - 10:50
With David Bianco

Register Here

For over a decade, the security community has defined threat hunting as a human‑driven process. We believed that while machines could detect, only humans could hunt. As the architect of the Sqrrl Hunting Loop and lead author of the PEAK Threat Hunting Framework, David Bianco helped promote this view.

But, David says, we’ve got a real problem today: AI‑driven attacks are transitioning from a possibility to a likelihood, shortening attack lifecycles from days and hours to minutes and seconds. The human is starting to look like an unnecessary bottleneck. We need machine speed and scale to stay competitive.

In security, however, the adversary always cheats, and even our most capable frontier models still have trouble with that. AI is fundamentally gullible, and it’s still so new to us that we discover ways to subvert it practically every week.

And there’s the paradox: defenders need AI to stay in the game, but our models aren’t trustworthy enough to rely on. We need their speed, their scale, and even their judgment, yet we know we can’t trust them to deliver reliable results by themselves.

Our conflicting need for both AI autonomy and human accountability deserves serious thought. Join David as he invites us to re‑examine the role of the human in threat hunting.

Is it time to let the machines drive?

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

David Bianco

Bio

David is a cybersecurity researcher with Cisco’s SURGe team, where he studies practical and effective uses of AI for defensive security operations. He is also a SANS Certified Instructor, where he teaches network forensics. David has nearly 30 years of experience in the information security field, primarily in incident detection and response, threat hunting, and Cyber Threat Intelligence (CTI). He is the creator of the Pyramid of Pain and lead author of the PEAK threat hunting framework. Really, he just wants to make security better for everyone. You can follow David on Bluesky as @DavidJBianco.bsky.social or on Mastodon as @DavidJBianco@infosec.exchange.

Threat Hunting Summit
2026-06-17 10:00 - 16:30
Summit:

June 17 @ 10:00 am – 4:30 pm EDT

Live Training:

June 18 – 26

REGISTER FOR SUMMIT ONLY

REGISTER FOR LIVE TRAINING

–DAYS–HOURS–MINUTES–SECONDS

Is your security posture proactive or reactive?

Threat hunting is where defenders assume compromise, search beyond alerts, and uncover attackers hiding in plain sight. It’s how modern security teams find what automated tools miss and stop breaches before they escalate.

The Antisyphon Training Threat Hunting Summit is a free, six-hour, live virtual event designed to give you a practical, real-world look at how threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

On June 17, 2026, join thousands of security practitioners and aspiring hunters as expert speakers break down real cyber threat hunt methodologies, essential technical skills, and career insights to help you think like an attacker and defend with confidence.

For those ready to go further, five hands-on, high-quality, and affordable training courses for a range of skill levels will be available after the Summit give you the tools you need to help you sharpen your skills and become a more proactive, effective defender.

Take Your Learning Further with LIVE Hands-On Training

Training Classes Include:

Threat Hunting on the EdgeTroy WojewodaJune 18 @ 10:00 am – 6:00 pm ET$295

LOLBINS vs. LOLBINS: Endpoint Threat HuntingPatterson CakeJune 19 @ 10:00 am – 6:00 pm ET$295

Cyber Threat Intelligence 101 2 Day VersionWade WellsJune 22-23 @ 10:00 am – 6:00 pm ET$575

Intro to Network Threat HuntingJohn StrandJune 24-25 @ 10:00 am – 6:00 pm ET$295

Agentic AI for Threat Hunting Faan RossouwJune 26 @ 10:00 am – 6:00 pm ET$295

Have a Training Budget?

We’ve taken the hassle out of making the case to you your manager with these reimbursement form templates specially crafted for our Threat Hunting Summit training offerings! Download the template, fill out a few fields, and send it on its way!

Threat Hunting on the Edge – Reimbursement Template

LOLBINS vs. LOLBINS Endpoint Threat Hunting – Reimbursement Template

Cyber Threat Intelligence 101 – Reimbursement Template

Intro to Network Threat Hunting – Reimbursement Template

Agentic AI for Threat Hunting – Reimbursement Template

Summit Schedule – All Times Eastern U.S.

9:30 – Pre-Show Banter

10:00 – Morning Keynote: David Bianco – The Hunter’s Paradox: Is It Time to Embrace Automated Threat Hunting?

10:50 – BREAK AND BANTER

11:00 – Faan Rossouw – How AI Agents Solve Threat Hunting’s Biggest Problem

11:30 – Jamie Levy – Memory Forensics for Everyone

12:00 – Sydney Marrone – Avoiding Hunt Amnesia: Building a Memory Your AI Can Use

12:30 – LUNCH BREAK – Words from our Sponsors | Active Countermeasures

1:00 – Hermon Kidane – Threat Hunting with RITA: A Behavioral Analysis of C2 Traffic

1:30 – Shane Hartman – Threat Hunting in the Dark: A Practical Approach

2:00 – Panel: Legal Landmines, Insurance & Incident Response

2:50 – BREAK AND BANTER

3:00 – Lauren Proehl – Fast-track Reports into Ready-Made Hypotheses with AI

3:30 – Afternoon Keynote: Jason Haddix – Defending AI: Organized Musings on Securing AI Agents for Cybersecurity

4:20 – CLOSING REMARKS

Talk Schedule – All Times Eastern U.S.

Keynote: The Hunter’s Paradox: Is It Time to Embrace Automated Threat Hunting?David BiancoJune 17 @ 10:00 am – 10:50 am ET

Talk: How AI Agents Solve Threat Hunting’s Biggest ProblemFaan RossouwJune 17 @ 11:00 am – 11:25 am ET

Talk: Memory Forensics for EveryoneJamie LevyJune 17 @ 11:30 am – 11:55 am ET

Talk: Avoiding Hunt Amnesia: Building a Memory Your AI Can UseSydney MarroneJune 17 @ 12:00 pm – 12:25 pm ET

Talk: Threat Hunting with RITA: A Behavioral Analysis of C2 TrafficHermon KidaneJune 17 @ 1:00 pm – 1:25 pm ET

Talk: Threat Hunting in the Dark: A Practical ApproachShane HartmanJune 17 @ 1:30 pm – 1:55 pm ET

Panel: Legal Landmines, Insurance & Incident ResponseMultiple SpeakersJune 17 @ 2:00 pm – 2:50 pm ET

Talk: Fast-track Reports into Ready-Made Hypotheses with AILauren ProehlJune 17 @ 3:00 pm – 3:25 pm ET

Keynote: Defending AI: Organized Musings on Securing AI Agents for CybersecurityJason HaddixJune 17 @ 3:30 pm – 4:20 pm ET

Threat Hunting Summit Talk: How AI Agents Solve Threat Hunting’s Biggest Problem
2026-06-17 11:00 - 11:25
With Faan Rossouw

Register Here

Is AI the force multiplier threat hunters have been waiting for—or just another buzzword?

Join Faan Rossouw, creator of aionsec.ai, as he walks you through how agentic AI frameworks can automate the grind, expand your investigative reach, and help you operate at a scale no individual threat hunter can match.

You’ll learn how to build and orchestrate teams of agents, design the supporting structures that make them effective, and apply them to real threat‑hunting workflows without losing control or context.

Whether you’re new to agents or looking to optimize your existing process, this session gives you a practical roadmap for hunting with AI today and a glimpse of what the next generation of threat hunting will look like.

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Faan Rossouw will be teaching Agentic AI for Threat Hunting on June 26.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Faan Rossouw

Bio

Faan Rossouw is a security researcher focused on the intersection of threat hunting and agentic AI. Faan is currently working on aionsec.ai, a complete educational ecosystem that helps threat hunters master AI agents – from using them effectively, to building their own, to securing them. He also has a deep interest in developing robust systems that produce coherent synthetic telemetry for security model training at scale. In his free time, Faan likes to hang out with his family and go for forest runs with his dog.

Threat Hunting Summit Talk: Memory Forensics for Everyone
2026-06-17 11:30 - 11:55
With Jamie Levy

Register Here

Have you ever wondered how to conduct an investigation using only RAM?

Join Jamie Levy, Senior Director of Adversary Tactics at Huntress and Core Developer of the Volatility project, for a technical session outlining how to analyze memory samples of infected machines quickly and efficiently.

She’ll show you how to efficiently conduct your own investigations using Volatility and confidently analyze malware running in memory. You’ll learn how to automate your workflow to work quickly through several memory samples at once.

Walk away with the skills to pull truth out of RAM—even when nothing else remains.

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Jamie Levy

Bio

Jamie Levy is the Senior Director of Adversary Tactics at Huntress. Jamie is also a researcher, developer, and board member of the Volatility Foundation. She has worked over 15 years in the digital forensics industry, conducting investigations as well as building software solutions. Jamie is also a co-author of The Art of Memory Forensics, the first book of its kind covering various facets of how to investigate RAM artifacts.

Threat Hunting Summit Talk: Avoiding Hunt Amnesia: Building a Memory Your AI Can Use
2026-06-17 12:00 - 12:25
With Sydney Marrone

Register Here

What if your next threat hunt could start with a simple question to your AI assistant: “What did we find last time we investigated lateral movement?”

Join Sydney Marrone, Head of Threat Hunting at Nebulock, as she introduces the LOCK pattern (Learn, Observe, Check, Keep), a lightweight framework for turning every investigation into a persistent, markdown‑based record your AI can actually use.

You’ll learn how to build a hunt repository that preserves institutional knowledge, accelerates future investigations, and gives both humans and AI assistants a shared memory to work from.

Give your hunting program a durable memory and watch your mean time to hypothesis drop.

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Sydney Marrone

Bio

Sydney Marrone is a threat hunter, cybersecurity professional, co-founder of THOR Collective, author of the Agentic Threat Hunting Framework, and co-author of the PEAK Threat Hunting Framework. She is passionate about making security knowledge accessible and actionable through hands-on research, open-source collaboration, and community-driven projects like HEARTH (Hunting Exchange And Research Threat Hub). Sydney creates resources, leads workshops, and shares insights that spark curiosity and empower defenders. Outside of work, she writes for THOR Collective Dispatch, lifts weights, and makes cyber-themed music using AI to blend creativity and hacker culture.

Threat Hunting Summit Talk: Threat Hunting with RITA: A Behavioral Analysis of C2 Traffic
2026-06-17 13:00 - 13:25
With Hermon Kidane

Register Here

How do you catch an attacker when their malware is specifically designed to blend in with everyday network noise?

Join Hermon Kidane, Network Threat Hunter at Active Countermeasures, as he walks you through a practical approach to finding covert command and control channels using RITA and Zeek telemetry.

You’ll learn how to analyze connection durations, beaconing cadences, and key metrics like network prevalence and first-seen behavior to spot DNS tunnels and persistent threats, cutting through the raw data to find the actual compromise.

Walk away with a downloadable custom dataset and some bonus hunting scripts, so you can immediately start practicing these techniques on your own.

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Hermon Kidan

Bio

Hermon is a Network Threat Hunter at Active Countermeasures where he does behavioral analysis of network traffic to expose covert infrastructure. His daily work centers on translating raw Zeek telemetry into actionable threat intelligence to track down persistent, low-and-slow threats. Prior to hunting, he spent two years at a help desk and another two years as a systems administrator. In his spare time, he likes to tinker with his homelab, follow Formula 1, and watch movies.

Threat Hunting Summit Talk: Threat Hunting in the Dark: A Practical Approach
2026-06-17 13:30 - 13:55
With Shane Hartman

Register Here

You know threats exist on your network—but where do you begin looking? Which direction should you go, and do you even have the data you need to find them?

Join Shane Hartman, Principal IR Consultant at TrustedSec, as he turns threat hunting from guesswork into a disciplined, hypothesis‑driven process.

You’ll learn how to cast a wide net, refine your hypotheses, validate suspicious behavior with real telemetry, and convert findings into actionable detections.

By the end of this session, you’ll have a repeatable method for creating, assessing, and executing hunts—so the next time you’re hunting in the dark, you won’t be going in blind.

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Shane Hartman

Bio

Shane Hartman is a Principal Incident Response Consultant at TrustedSec, specializing in advanced threat hunting, forensic triage, and intrusion analysis. With over 30 years in IT and two decades in information security, Shane helps organizations detect, investigate, and contain targeted attacks against critical systems and intellectual property. His previous roles at FireEye, Fortinet, and RSA focused on malware reverse engineering, threat intelligence production, and adversary tradecraft analysis. He frequently presents and teaches at the University of South Florida on topics including Digital Forensics, Ethical Hacking, and Offensive Operations.

Threat Hunting Summit Panel: Legal Landmines, Insurance & Incident Response
2026-06-17 14:00 - 14:50
With Patterson Cake, Troy Wojewoda, John Danyluk and David Vanalek

Register Here

When should you call your cyber insurance provider, and when should you bring in outside legal counsel? And does privilege actually protect your incident communications from discoverability during litigation?

Join Patterson Cake (Director of IR, BHIS), Troy Wojewoda (Incident Responder, Threat Hunter, and SOC Principal Analyst, BHIS), John Danyluk (Partner, Gentry Locke), and David Vanalek (Chief Legal and Compliance Officer, Richmond National Insurance) for a fast‑paced, candid panel discussion that demystifies the legal and insurance decisions every defender eventually faces.

You’ll learn how incident responders, insurers, and attorneys think about notification timelines, privilege, documentation, and the real‑world consequences of calling—or not calling—the right people at the right time.

Bring your toughest questions: the panel will open the floor for live Q&A so you can finally get straight answers to the insurance and legal questions no one ever explains.

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Troy Wojeowda will teach Threat Hunting on the Edge on June 18.

Patterson Cake will be teaching LOLBINS vs. LOLBINS: Endpoint Threat Hunting on June 19.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructors

Patterson Cake

Bio

Patterson Cake has worked in cybersecurity for more than two decades, specializing in the development of incident-response teams, programs, and processes. He is currently the Director of Incident Response for Black Hills Information Security, holds more than twenty-five industry certifications, is a former SANS instructor, teaches for Antisyphon, and has trained law enforcement, military, and national cybersecurity organizations on four continents. Patterson is the creator of the “Incident Response Capabilities Matrix Model,” developed “Rapid Triage Workflow” for IR investigations, is a prolific speaker, and is actively involved in the cybersecurity community.

Troy Wojewoda

Bio

Troy Wojewoda is a Security Analyst at Black Hills Information Security (BHIS). Prior to joining BHIS, Troy has held roles in application and system administration, host and network intrusion detection, wireless security, penetration testing, digital forensics, malware analysis, threat hunting, and incident response. In addition to earning several professional certifications, Troy has a BS in Computer Engineering and Computer Science.

David T. Vanalek

Bio

David T. Vanalek is the Chief Legal and Compliance Officer and Corporate Secretary of Richmond National, a specialty excess and surplus lines insurance company dedicated to writing hard to place risks for small and mid-sized businesses across the country headquartered in Richmond, Virginia. David is responsible for all corporate governance, regulatory, compliance, claims law, and litigation activities of the company and its affiliates, and serves as legal advisor to the leadership team, business units, and board of directors. Prior to joining Richmond National, David served as the Claims Chief Operating Officer at a global Fortune 500 insurance carrier, where he led the day to day operational support for all claims divisions responsible for all lines of business throughout North America and Bermuda. David also served for years in various claims leadership roles in the professional liability, cyber liability and management liability product lines. Prior to joining the insurance industry, Mr. Vanalek was in private practice as a commercial litigator, serving clients throughout California and Illinois. He received his Bachelor’s degree from the University of California, Los Angeles, and his law degree from the University of California, Davis, where he served as an Editor on Law Review, as well as a judicial extern for an associate justice of the California Supreme Court. Mr. Vanalek is a frequent speaker on insurance, claims, technology, professional liability, cyber liability and management liability issues.

John Danyluk

Bio

John Danyluk is a partner at Gentry Locke and a member of its Band‑1‑ranked White Collar Defense, Investigations & Compliance practice group. He represents corporate and individual clients through all phases of the criminal process and advises highly regulated industries—including government contractors, healthcare, and critical infrastructure—on compliance and risk. A Certified Information Privacy Professional (CIPP/US), he guides organizations through complex data‑privacy and cybersecurity obligations, conducts internal investigations, and helps clients navigate cyber incidents and regulatory scrutiny. John draws on his experience as an Army JAG Officer and former Special Assistant U.S. Attorney, where he litigated more than 1,000 cases and advised senior leaders on procurement, trade regulations, and national‑security matters.

Threat Hunting Summit Talk: Fast-track Reports into Ready-Made Hypotheses with AI
2026-06-17 15:00 - 15:25
With Lauren Proehl

Register Here

What if every intelligence report instantly became a ready‑to‑run hypothesis — instead of dying in a Slack channel?

In this talk, Lauren Proehl, Global Head of Detection and Response at Marsh and co‑founder of THOR Collective, walks through a practical, repeatable workflow for using large language models to convert published threat reports into structured, testable hunt hypotheses.

She’ll break down how to extract attacker tradecraft, map TTPs, scope data sources, and generate analytic logic hunters can run immediately. Real examples will help you explore how crafted prompts can surface detection gaps, enrich investigations, and produce hypotheses that go far beyond IOC matching.

Examine how AI‑assisted workflows are reshaping the future of threat hunting and leave with a method you can put to work, whether you’re a solo hunter or running a mature program.

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Lauren Proehl

Bio

Lauren Proehl leads detection and response globally at Marsh, overseeing the full lifecycle from threat intelligence through incident response and red teaming. She is co-founder of THOR Collective, a practitioner-driven cybersecurity collective, and has spent her career identifying and disrupting cyber adversaries across Fortune 500 networks — from data breaches to targeted intrusions. She now works to define some part of the limitless unknowns in cyberspace and make cybersecurity less abstract and more tangible. Lauren sits on the CFP board for BSides Kansas City, serves on the board of Urban Trail Co., and tries to escape computers by running long distances in the woods.

Threat Hunting Summit Keynote: Defending AI: Organized Musings on Securing AI Agents for Cybersecurity
2026-06-17 15:30 - 16:20
With Jason Haddix

Register Here

Are you securing your AI agents, or just hoping the system prompt holds?

As AI agents move from prototypes into production, most security programs are still treating them like traditional apps or opaque black boxes – and that gap is where real risk is emerging.

Join Jason Haddix, CEO and “Hacker in Charge” at Arcanum Information Security, as he lays out a practical architecture for defending AI agents based on real-world assessments and organizing controls across the full ecosystem: application design and tool boundaries, system prompt hardening, and intermediate guardrails and classifier-based protections.

He’ll cover how attacks actually manifest across these layers, the best security practices and common missteps seen in development teams, and where open-source defensive tooling fits today.

The focus of this talk is pragmatic: giving defenders a usable mental model, concrete configurations, and the tradeoffs they need to understand to make AI systems survivable in production.

If you’re building or defending AI systems, this is the playbook you’ll want to have.

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Jason Haddix

Bio

Jason Haddix, also known as jhaddix, is the CEO and “Hacker in Charge” at Arcanum Information Security. Arcanum is a world-class assessment and training company.

Jason has had a distinguished 20-year career in cybersecurity, previously serving as CISO of FLARE, CISO of Buddobot, CISO of Ubisoft, Head of Trust/Security/Operations at Bugcrowd, Director of Penetration Testing at HP, and Lead Penetration Tester at Redspin. He has also held positions doing mobile penetration testing, network/infrastructure security assessments, and static analysis. Jason is a hacker and bug hunter and is currently ranked 57th all-time on Bugcrowd’s bug bounty leaderboards. Currently, he specializes in recon, web application analysis, and emerging technologies. Jason has also authored many talks on offensive security methodology, including speaking at conferences such as DEFCON, Bsides, BlackHat, RSA, OWASP, Nullcon, SANS, IANS, BruCon, Toorcon and many more.

Threat Hunting on the Edge
2026-06-18 10:00 - 18:00

LOLBINS vs. LOLBINS: Endpoint Threat Hunting
2026-06-19 10:00 - 18:00

Cyber Threat Intelligence 101 2 Day Version
2026-06-22 10:00 - 2026-06-23 18:00

Intro to Network Threat Hunting
2026-06-24 10:00 - 2026-06-25 18:00

Anti-Cast: Prompt Engineering 201: The Context Stack with Bronwen Aker
2026-06-24 12:00 - 13:00
What separates a so-so AI response from one you can actually rely on?

In this Anti-Cast, Bronwen Aker, AI Researcher at BHIS, will take you beyond prompting fundamentals and move into more advanced prompt techniques designed for real-world use.

Along the way, you’ll see how context, structure, and clearly defined outputs transform inconsistent replies into something dependable and repeatable. That shift means less time fixing results and more confidence in what you produce, whether you’re new or experienced.

The answer isn’t more complexity. It’s knowing how to shape the input so the model delivers exactly what you need.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Agentic AI for Threat Hunting
2026-06-26 10:00 - 18:00

Active Defense and Cyber Deception with John Strand
2026-06-29 12:00 - 2026-07-02 16:00

Anti-Cast: Deploying Emergency Comms with Drones & Mesh with Evan & Luke
2026-07-01 12:00 - 13:00
What if you could restore communications after a disaster using tools you can build, carry, and deploy yourself?

Join Evan Kirstein, Mesh Networking Practitioner & Amateur Radio Operator (KJ5MCN), and Luke Canfield, Tactical UAS Researcher & Defense Systems Analyst, for a free one‑hour Anti-Cast where they’ll walk you through a practical, field‑tested approach to re‑establishing connectivity using two accessible technologies: 3D‑printable FPV airframes and Meshtastic (LoRa) mesh radios.

You’ll learn how to select frames and components, design resilient meshes, navigate the high‑level legal and ethical boundaries, and deploy hardened handheld nodes, elevated antennas, and solar‑backed repeaters to restore situational awareness and coordination when infrastructure fails.

By the end of this session, you’ll have a repeatable blueprint for building and fielding low‑cost, infrastructure‑independent communication systems—an essential capability for incident responders, EMCOMM volunteers, and small‑business continuity teams committed to #DronesForGood.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Anti-Cast: Forensic Investigations: What AI and Analysts Get Wrong with Markus Schober
2026-07-08 12:00 - 13:00
How many forensic reports contain conclusions that the evidence doesn’t actually support?

Join Markus Schober, founder of Blue Cape Security and former enterprise incident responder, demonstrates why both AI and human analysts draw incorrect conclusions from Windows forensic artifacts, and how proper correlation leads to more defensible investigations.

You’ll learn to evaluate artifact confidence, avoid overclaiming findings, and correlate multiple evidence sources to answer the most critical questions in DFIR — what was executed, when, and how.

If you’ve ever relied on single artifacts to support findings, this session will challenge how you think about evidence, strengthen your investigative tradecraft, and help you produce conclusions you can confidently defend.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!

Workshop: CI CD Exploitation and Hardening
2026-07-10 12:00 - 16:00

Anti-Cast: How to Make OT Risk Impossible to Ignore with Ashley Wolfe
2026-07-15 12:00 - 13:00
Is your OT network one vendor VPN away from a six-day shutdown? Would you even know?

Join Ashley Wolfe, OT/ICS security practitioner and researcher, as she breaks down why OT security proposals keep dying in conference rooms — and how to walk in with something that actually sticks. In one hour, you’ll leave with a threat scenario that fits your industry, a number you can put on inaction, and a first step that doesn’t need budget approval.

You’ve known something was wrong. This hour is about finally being able to prove it.

Register Here

Join us for PreShow Banter™ at 11:30 AM ETChat with your fellow attendees in the BHIS Discord server:https://discord.gg/bhis in the #🔴live-chat channel

Stay up to date on our upcoming live Anti-Casts and more at https://poweredbybhis.com

Don’t forget to check out our Course Catalog for our upcoming free and affordable cybersecurity training!
