Blue Team Con 2026: Grid

Expand

Microsoft Technology Center (Aon Center)

6:45am
7:00am
7:15am
7:30am
7:45am
8:00am
8:15am
8:30am
8:45am
9:00am
9:15am
9:30am
9:45am
10:00am
10:15am
10:30am
10:45am
11:00am
11:15am
11:30am
11:45am
12:00pm
12:15pm
12:30pm
12:45pm
1:00pm

Training Registration 7:00am - 10:00am

Training Breakfast 8:15am - 8:45am

CQURE Masterclass: System Forensics, Incident Handling & Threat Hunting 10 9:00am -
11 5:00pm

Exploring AI Visibility: Shedding Light on Shadow AI, Attack Surface, Telemetry, and LLM Proxies 10 9:00am -
11 5:00pm

Defending Enterprises - 2026 Edition 10 9:00am -
11 5:00pm

Offense for Defense 10 9:01am -
11 5:00pm

Training Lunch 12:00pm - 1:00pm

Expand

Location Emailed to Ticket Holders	Microsoft Technology Center (Aon Center)	Swissôtel Chicago - registration desk

6:45am
7:00am
7:15am
7:30am
7:45am
8:00am
8:15am
8:30am
8:45am
9:00am
9:15am
9:30am
9:45am
10:00am
10:15am
10:30am
10:45am
11:00am
11:15am
11:30am
11:45am
12:00pm
12:15pm
12:30pm
12:45pm
1:00pm
1:15pm
1:30pm
1:45pm
2:00pm
2:15pm
2:30pm
2:45pm
3:00pm
3:15pm
3:30pm
3:45pm
4:00pm
4:15pm
4:30pm
4:45pm
5:00pm
5:15pm
5:30pm
5:45pm
6:00pm
6:15pm
6:30pm
6:45pm
7:00pm
7:15pm
7:30pm
7:45pm
8:00pm
8:15pm
8:30pm
8:45pm
9:00pm

Attendee Appreciation Dinner 6:00pm - 9:00pm

Training Registration 7:00am - 10:00am

Training Breakfast 8:15am - 8:45am

IANS CISO Roundtable 9:00am - 3:30pm

Training Lunch 12:00pm - 1:00pm

General Conference Registration 3:00pm - 9:00pm

Expand

Swissôtel Chicago	Swissôtel Chicago - registration desk	Swissôtel Chicago - swag booth	Swissotel Chicago - Track 1	Swissôtel Chicago - Track 2	Swissôtel Chicago - Track 3

6:45am
7:00am
7:15am
7:30am
7:45am
8:00am
8:15am
8:30am
8:45am
9:00am
9:15am
9:30am
9:45am
10:00am
10:15am
10:30am
10:45am
11:00am
11:15am
11:30am
11:45am
12:00pm
12:15pm
12:30pm
12:45pm
1:00pm
1:15pm
1:30pm
1:45pm
2:00pm
2:15pm
2:30pm
2:45pm
3:00pm
3:15pm
3:30pm
3:45pm
4:00pm
4:15pm
4:30pm
4:45pm
5:00pm
5:15pm
5:30pm
5:45pm
6:00pm
6:15pm
6:30pm
6:45pm
7:00pm
7:15pm
7:30pm
7:45pm
8:00pm
8:15pm
8:30pm
8:45pm
9:00pm
9:15pm
9:30pm
9:45pm
10:00pm
10:15pm
10:30pm
10:45pm
11:00pm
11:15pm
11:30pm
11:45pm
12:00am
12:15am
12:30am
12:45am
1:00am

Labs Village 10:00am - 6:00pm

IoT Village 10:00am - 6:00pm

Melian Security Lab 10:00am - 12:00pm

Wellness Village 10:00am - 6:00pm

CTF Village 10:00am - 6:00pm

Linux Village 10:00am - 6:00pm

Cyber Polyglots Village 10:00am - 6:00pm

Unconference 10:00am - 11:59pm

[Last Minute] Capture The Flag 10:30am - 11:59pm

El Azteca - Mexican Food Truck 11:00am - 1:00pm

Willie P's BBQ Food Truck 11:30am - 1:30pm

Exaforce Lab 12:00pm - 2:00pm

Coping mechanisms: Strategies fo... 1:30pm - 2:00pm

Empirical Security Lab 2:00pm - 4:00pm

Conquering Imposter Syndrome 2:30pm - 3:00pm

Flare Lab 4:00pm - 6:00pm

Pain Management vs Pain Avoidanc... 5:00pm - 5:30pm

Game Shows with Tib3rius and C3rul34n 7:00pm - 9:00pm

Saturday Night Party! 9:00pm - 11:00pm

Sober Board Games 12 9:00pm -
13 11:00pm

Karaoke 12 11:00pm -
13 1:00am

General Conference Registration 7:00am - 7:00pm

Swag Booth Open 11:00am - 4:00pm

Opening Ceremonies 9:00am - 9:30am

Keynote Address: We Keep Us Safe 9:30am - 10:20am

How We've Gone Completely Phishing-resistant (And So... 11:00am - 11:50am

Breaking Identity at Scale: From DPAPI & TBAL Secrets... 12:00pm - 12:50pm

Defending the Hypervisor: Using Offensive Tooling to... 1:00pm - 1:50pm

The Second Front: Detecting LOTL Off the Endpoint 2:00pm - 2:50pm

Entra the Dragon: Entra ID Red vs Blue 3:00pm - 3:50pm

Reconstructing Reality: Advanced USN Journal Extracti... 4:00pm - 4:50pm

Behaviour-Driven Detection for Software Supply Chain... 5:00pm - 5:50pm

A Standard For Investigative Playbooks

Too Big to Review: Scaling AppSec to Zero at For...

The Demon Dog of Defense in Depth

Secrets That Survive Everything: The Shift-Right...

Your User, Their Rules: Rethinking the OS trust...

AI Failures in IR: A Field Guide to Filling the...

Life After Tier 1: Rebuilding the SOC When Triag...

Learning How to Pop Champagne Bottles: How Leade...

Vibe Check: Scaling AppSec in an AI-Driven World

It Started with an Employee. It Ended Inside You...

Paving the Road for AI-Driven Security Teams

Finding SOCKS with ProxyWatch 4:00pm - 4:25pm

Zero Trust After the Breach: Lessons from Real-W...

Superposition, not Superstition

Building the Human Firewall: Why Security Awaren...

Vulnerability Management: The Leadership Playboo...

Purple Testing Is Not Enough — Why CTEM Is the M...

Threat Intelligence at the Speed of Cyber Defens...

Same Network, Different Worlds: Bridging the IT...

MDR: From Vendor Shortlist to Security Partnersh...

Game of Cones: Why Your Crisis Plan Shouldnt Mel...

Make the Governed Path the Apparent One

Teaching AI to Analyze Malware: How to Encode Pr...

CISA’s Menu for Vulnerability Management

Beyond The Auth Artifacts: Identifying Intrusion...

Beyond the SIEM: Critical Governance and Archite...

The End is Just the Beginning of Better Security...

It Wasn’t Spoofed: Investigating Authenticated E...

Defending the Credential Reset Process

So You Want to Be a Forensicator... 5:30pm - 6:00pm

Expand

Swissôtel Chicago	Swissotel Chicago - Track 1	Swissôtel Chicago - Track 2	Swissôtel Chicago - Track 3

11:45pm
12:00am
12:15am
12:30am
12:45am
1:00am
1:15am
1:30am
1:45am
2:00am
2:15am
2:30am
2:45am
3:00am
3:15am
3:30am
3:45am
4:00am
4:15am
4:30am
4:45am
5:00am
5:15am
5:30am
5:45am
6:00am
6:15am
6:30am
6:45am
7:00am
7:15am
7:30am
7:45am
8:00am
8:15am
8:30am
8:45am
9:00am
9:15am
9:30am
9:45am
10:00am
10:15am
10:30am
10:45am
11:00am
11:15am
11:30am
11:45am
12:00pm
12:15pm
12:30pm
12:45pm
1:00pm
1:15pm
1:30pm
1:45pm
2:00pm
2:15pm
2:30pm
2:45pm
3:00pm
3:15pm
3:30pm
3:45pm
4:00pm
4:15pm
4:30pm

Unconference 12:00am - 3:00pm

[Last Minute] Capture The Flag 12:00am - 1:00pm

Mental Health Hackers' 2nd Annual 9 Bridge Challenge [Run] 8:00am - 9:00am

Coffee & Tea Break 8:30am - 9:00am

Swag Booth Open 9:00am - 1:00pm

General Conference Registration 9:00am - 1:00pm

Massages in The Wellness Village 10:00am - 4:00pm

Linux Village 10:00am - 3:00pm

Labs Village 10:00am - 3:00pm

Active Directory Post-Mortem: Assumptions vs Reality 10:00am - 10:50am

Wellness Village 10:00am - 3:00pm

The Malware Is Coming from Inside the Repo 10:00am - 10:50am

CTF Village 10:00am - 1:00pm

IoT Village 10:00am - 3:00pm

Cyber Polyglots Village 10:00am - 3:00pm

Nick's Pizza Truck 11:00am - 1:00pm

El Azteca - Mexican Food Truck 11:00am - 1:00pm

I Want to Tell You Two Stories:... 1:00pm - 1:30pm

Girl Scout Cookies 2:00pm - 3:00pm

Closing Ceremonies 3:30pm - 4:30pm

Fortress in a Box: Enterprise-Grade Kubernetes Securi... 11:00am - 11:50am

Trusted, But Dangerous: Identity Abuse Through First-... 12:00pm - 12:50pm

The Only Way to Win Is by Learning: Deception Design,... 1:00pm - 1:50pm

Strength in Diversity: Building an Inclusive Cybersec... 2:00pm - 2:50pm

How to Do Just About Anything (Including Securit...

From Logs to Logic: Building Detections That Don...

Containers Don't Lie. But Your Security Tooling...

Deception strategy for securing cloud workloads

When the Package Is the Weapon: Detecting and Re...

Models and More: using data to inform decision m...

Using Pentest Findings to Improve Detections

From Compliance to Covert Ops: Demystifying the...

The Contextualization Gap: Why Your SOC Has the...

AI-Assisted IR Without the Lies: A Browser Foren...

Slaying the Sprawl: A Hero’s Guide to Building (or Re... 11:00am - 11:50am

From Hours to Minutes With StealerLens: LLM-Accelerat... 12:00pm - 12:50pm

Why Incident Response Plans Fail Under Pressure 1:00pm - 1:50pm

LLMs - How to Trust When We Can’t Verify 2:00pm - 2:50pm

Blue Team Con 2026

Get help with the event