Blue Team Con 2026

arrow_back View All Dates

10:30am CDT

A Standard For Investigative Playbooks Swissôtel Chicago - Track 2Matthew Gracie

11:00am CDT

Purple Testing Is Not Enough — Why CTEM Is the Missing Layer Swissôtel Chicago - Track 3Irina Dimitrov (Loktionova) How We've Gone Completely Phishing-resistant (And So Can You!) Swissotel Chicago - Track 1Eric Woodruff

11:30am CDT

The Demon Dog of Defense in Depth Swissôtel Chicago - Track 2Aria Langer

12:00pm CDT

Same Network, Different Worlds: Bridging the IT Ops and SOC Divide Swissôtel Chicago - Track 3Sameer Singhal

12:30pm CDT

MDR: From Vendor Shortlist to Security Partnership Swissôtel Chicago - Track 3Alan Simpson

1:00pm CDT

AI Failures in IR: A Field Guide to Filling the Gaps Swissôtel Chicago - Track 2Alex Thomson

2:00pm CDT

The Second Front: Detecting LOTL Off the Endpoint Swissotel Chicago - Track 1Mark Orlando

3:00pm CDT

Beyond The Auth Artifacts: Identifying Intrusions by Correlating Identity and EDR Telemetry Swissôtel Chicago - Track 3Shogo Hayashi • Teruki Yoshikawa

3:30pm CDT

Paving the Road for AI-Driven Security Teams Swissôtel Chicago - Track 2Joakim Pedersen • Britton Hayes

4:00pm CDT

Finding SOCKS with ProxyWatch Swissôtel Chicago - Track 2Brian Reitz • John Wotton

4:30pm CDT

Zero Trust After the Breach: Lessons from Real-World Incident Response Swissôtel Chicago - Track 2Andrea Ibiassi

5:00pm CDT

Defending the Credential Reset Process Swissôtel Chicago - Track 3Tom Cross