Threat Hunting Summit Talk: Fast-track Reports into Ready-Made Hypotheses with AI
2026-06-17 15:00 - 15:25 (America/New_York)
With Lauren Proehl

What if every intelligence report instantly became a ready‑to‑run hypothesis — instead of dying in a Slack channel?

In this talk, Lauren Proehl, Global Head of Detection and Response at Marsh and co‑founder of THOR Collective, walks through a practical, repeatable workflow for using large language models to convert published threat reports into structured, testable hunt hypotheses.

She’ll break down how to extract attacker tradecraft, map TTPs, scope data sources, and generate analytic logic hunters can run immediately. Real examples will help you explore how crafted prompts can surface detection gaps, enrich investigations, and produce hypotheses that go far beyond IOC matching.

Examine how AI‑assisted workflows are reshaping the future of threat hunting and leave with a method you can put to work, whether you’re a solo hunter or running a mature program.

Register Here

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Lauren Proehl

Bio

Lauren Proehl leads detection and response globally at Marsh, overseeing the full lifecycle from threat intelligence through incident response and red teaming. She is co-founder of THOR Collective, a practitioner-driven cybersecurity collective, and has spent her career identifying and disrupting cyber adversaries across Fortune 500 networks — from data breaches to targeted intrusions. She now works to define some part of the limitless unknowns in cyberspace and make cybersecurity less abstract and more tangible. Lauren sits on the CFP board for BSides Kansas City, serves on the board of Urban Trail Co., and tries to escape computers by running long distances in the woods.

Threat Hunting Summit Keynote: Defending AI: Organized Musings on Securing AI Agents for Cybersecurity
2026-06-17 15:30 - 16:20 (America/New_York)
With Jason Haddix

Are you securing your AI agents, or just hoping the system prompt holds?

As AI agents move from prototypes into production, most security programs are still treating them like traditional apps or opaque black boxes – and that gap is where real risk is emerging.

Join Jason Haddix, CEO and “Hacker in Charge” at Arcanum Information Security, as he lays out a practical architecture for defending AI agents based on real-world assessments and organizing controls across the full ecosystem: application design and tool boundaries, system prompt hardening, and intermediate guardrails and classifier-based protections.

He’ll cover how attacks actually manifest across these layers, the best security practices and common missteps seen in development teams, and where open-source defensive tooling fits today.

The focus of this talk is pragmatic: giving defenders a usable mental model, concrete configurations, and the tradeoffs they need to understand to make AI systems survivable in production.

If you’re building or defending AI systems, this is the playbook you’ll want to have.

Register Here

Chat with your fellow Threat Hunting Summit attendees in the Antisyphon Discord server: https://discord.gg/antisyphon

This talk is part of the Antisyphon Training Threat Hunting Summit, a free, six-hour, live virtual event designed to give you a practical, real-world look at how cyber threat hunters detect stealthy adversaries, investigate suspicious behavior, and turn discoveries into stronger defenses.

For those who want to go further, multiple hands-on, high-quality, and affordable training courses are available June 18-26 to help you sharpen your skills and become a more proactive, effective defender.

Learn more about the Threat Hunting Summit

See the entire Antisyphon Training Course Catalog for affordable cybersecurity training!

About the Instructor

Jason Haddix

Bio

Jason Haddix, also known as jhaddix, is the CEO and “Hacker in Charge” at Arcanum Information Security. Arcanum is a world-class assessment and training company.

Jason has had a distinguished 20-year career in cybersecurity, previously serving as CISO of FLARE, CISO of Buddobot, CISO of Ubisoft, Head of Trust/Security/Operations at Bugcrowd, Director of Penetration Testing at HP, and Lead Penetration Tester at Redspin. He has also held positions doing mobile penetration testing, network/infrastructure security assessments, and static analysis. Jason is a hacker and bug hunter and is currently ranked 57th all-time on Bugcrowd’s bug bounty leaderboards. Currently, he specializes in recon, web application analysis, and emerging technologies. Jason has also authored many talks on offensive security methodology, including speaking at conferences such as DEFCON, Bsides, BlackHat, RSA, OWASP, Nullcon, SANS, IANS, BruCon, Toorcon and many more.

Active Defense and Cyber Deception with John Strand
2026-06-29 12:00 - 2026-07-02 16:00 (America/New_York)

Workshop: CI CD Exploitation and Hardening
2026-07-10 12:00 - 16:00 (America/New_York)

Professionally Evil CISSP Mentorship Program
2026-09-01 14:00 - 2026-09-06 16:00 (America/New_York)

Wild West Hackin' Fest Deadwood 2026
2026-10-06 08:00 - 2026-10-09 20:30 (America/Denver)

Active Directory Security and Hardening
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Attacking and Defending AI
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Advanced Endpoint Investigations
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Breaching the Cloud with Beau Bullock
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Cybersecurity Incident Command
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Defending M365 and Azure with Kevin Klingbile
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Enterprise DFIR Investigations: Ransomware & APT Attacks
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Foundations of Security Operations with Hayden Covington
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Fundamentals of Android Application Security Testing
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Fundamentals of Cybersecurity: Threats & Defenses
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Hacking and Defending Satellite Infrastructure
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Hands-On AI Security Risk Assessment
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Intro to IoT Hacking
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Network Forensics and Incident Response
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Next Level OSINT with Mishaal Khan
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Offense for Defense
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Penetration Testing: Beyond the Basics
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

PowerShell for InfoSec: What You Need to Know
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)

Threat Hunting & Incident Response with Velociraptor
2026-10-06 08:30 - 2026-10-07 17:00 (America/Denver)
