Loading…

Type: Lab clear filter
Saturday, September 12
 

10:00am CDT

Melian Security Lab
Saturday September 12, 2026 10:00am - 12:00pm CDT
Step into a live APT intrusion, modeled on real-world incidents. Alerts are firing across your environment: zero-day exploitation, lateral movement, and stealthy data exfiltration. In this lab you drive the incident response in Melian as the AI correlates the scattered alerts into one attack, digs into the raw logs behind them, builds the timeline, and scopes the blast radius, compressing hours of manual work into minutes. 

Then you close the loop and take the attacker's TTPs from the incident and use Melian to author new detection rules in your SIEM's native query language, so the same intrusion is caught automatically next time. Sit down, run the response, and leave with detections you built. 


Saturday September 12, 2026 10:00am - 12:00pm CDT
Swissôtel Chicago 323 E Wacker Dr, Chicago, IL 60601, USA

12:00pm CDT

Exaforce Lab
Saturday September 12, 2026 12:00pm - 2:00pm CDT
If you spend your days triaging alerts and closing cases, this one is for you.

Exaforce is running a hands-on investigation lab at Blue Team Con. No slides. No pitch. Just you, the platform, and a set of real threat scenarios to work through.

Start with a guided 15-minute walkthrough: a live threat investigation running inside Exaforce, from first alert to closed case, powered by Exabot Search. Ask questions in plain language, watch Exabots triage and investigate in real time, and see what it looks like when AI handles the grunt work so you can focus on the call that actually matters.

We will load up four or five additional alerts and hand the platform over to you for you to take the wheel. Work through them at your own pace. We will be right there if you get stuck or want to dig deeper.

This is what analysts actually want to know: does it work, how fast, and would I trust it at 3 AM? Come find out at the Exaforce Lab Slot.


Saturday September 12, 2026 12:00pm - 2:00pm CDT
Swissôtel Chicago 323 E Wacker Dr, Chicago, IL 60601, USA

2:00pm CDT

Empirical Security Lab
Saturday September 12, 2026 2:00pm - 4:00pm CDT
Put your hands on the future of Exposure Management and get a live demonstration of Empirical Security's predictive vulnerability intelligence platform. 

Watch Foundation surface exploit activity across 18,000+ CVEs in real time. understanding not just what vulnerabilities exist, but which ones attackers are actually using and where global threats are heading. 
Then see Radiant go further. Built and trained on your organization's own assets, controls, cloud footprint, and telemetry, Radiant delivers a custom predictive engine that tells you which exposures pose the greatest threat to your specific organization (not an industry average). 

Walk away knowing the difference between a vulnerability that matters and one that doesn't. That's the unfair advantage we're here to give you. 



Saturday September 12, 2026 2:00pm - 4:00pm CDT
Swissôtel Chicago 323 E Wacker Dr, Chicago, IL 60601, USA

4:00pm CDT

Flare Lab
Saturday September 12, 2026 4:00pm - 6:00pm CDT
Worried about exposure risks tied to stealer logs, leaked credentials (passwords, API keys, tokens), phishing kits, and dark web activity? In this hands-on workshop, you'll get inside Flare's identity-first threat intelligence platform and practice the workflow security teams use to turn raw exposure data into action. 
 
You'll work through the following use cases:  

  • Trace exposed credentials from stealer logs, word combo-lists, or URL-Login-Passwords (ULPs) before they become account takeovers, and pivot to maximize coverage 
  • Investigate live threats across Telegram channels, dark web forums, and marketplaces from a single console 
  • Investigate stolen files exposure on a ransomware dedicated leak site (DLS) 
  • If time permits, use the API for advanced use cases 
Bring in your domains, brand names and public subnets. This session is built for threat intelligence analysts, SOC teams, and security researchers who want to experience the user-friendly, fast and transparent cyberthreat intelligence platform Flare has to offer. 



Saturday September 12, 2026 4:00pm - 6:00pm CDT
Swissôtel Chicago 323 E Wacker Dr, Chicago, IL 60601, USA
 
Blue Team Con 2026
From $0.00
Share Modal

Share this link via

Or copy link

Filter sessions
Apply filters to sessions.