Blue Team Con 2025 Schedule

9:00am to 9:30am

Opening Ceremonies with Blue Team Con Advisory Board

9:30am to 10:25am

Keynote: “Less Resources, More Impact: Doing More With Less In Cybersecurity” with Jake Williams

11:00am to 11:50am

“SkyScalpel: Making & Breaking
{“Policy”: “Obfu0075scA**Tion”} in the Cloud” with Abian Morina

12:00pm to 12:50pm

“Ransomware Rampage: Gamifying Your Incident Response Playbook” with Anushree Vaidya

1:00pm to 1:50pm

“.e”X”es and “O”auths (They Haunt Me): An In-Depth Analysis of OAuth & OIDC Misconfigurations and Token Replay Attack” with Darryl G. Baker

2:00pm to 2:50pm

“Ensuring Data Integrity in Incident Response: Tools and Techniques for Forensically Sound Log Extraction” with Colin Meek

3:00pm to 3:50pm

“Transforming Cyber Risk Assessments Through Continuous Validation” with Irina Loktionova and Chris Oshaben

4:00pm to 4:50pm

“Leading Multi-Generational Cybersecurity Teams with Transparency, Candor, and Empathy” with Mike Glatz

5:00pm to 5:50pm

“Unseen but Not Unheard: Exposing the Cases of CSS Abuse in Email Threats and Fortifying Defenses” with Omid Mirzaei

10:30am to 10:55am

“Detection Opportunities for Countering Remote Employment Fraud: A Phase-based Strategy” with Alex Orleans and Jonathan Heckinger

11:00am to 11:25am

“What Now? Navigating the Transition from Engineer to Manager” with Cory Roop

11:30am to 11:55am

“Building a Threat Hunting Program from the Ground Up” with Ryan Fried and Estefania Michael

12:00pm to 12:25pm

“Technical Writers: Your Cybersecurity Secret Weapon” with Jennifer Miller

12:30pm to 12:55pm

“Foundations of Resilience: Mastering the Business Impact Analysis” with Jeremy Croghan

1:00pm to 1:25pm

“DFIR-as-Code: Scaling Incident Response Beyond Human Limits” with Justin Borland

1:30pm to 1:55pm

“LLM-Powered Vulnerability Management Operations: Use Cases and Success Stories” with Cong Zheng and Darcy Meyer

2:00pm to 2:25pm

“Securing Sideways: Thwarting Lateral Movement, with no extra software!” with R. Tyler Schroder

2:30pm to 2:55pm

“How Attackers are using AI and how to defend against them, by an incident responder turned AI researcher.” with Eyal Fisher

3:00pm to 3:25pm

“Decoding Dyslexia: Thriving in Cybersecurity with a Different Brain” with Caleb Grossnickle

3:30pm to 3:55pm

“AI-Powered Cloud Security: Defending Cloud Workloads from Next-Gen Cyber Threats” with Advait Patel

4:00pm to 4:25pm

“From Alerts to Action – LLMs for Explainability, Entity Analysis, and Escalation” with Scott Rodgers and Kevin Gonzalez

4:30pm to 4:55pm

“Did I Do Thaaat? How not to “whoopsie” production away, a humanist risk-management-based approach.” with Daniel (Bogo) Bogomolny

5:00pm to 5:25pm

“AI as the SOC Sidekick: Streamlining Security Without Stepping Over Humans” with Cliff Crosland

5:30pm to 5:55pm

“Hidden Dangers Of AI In Developer Workflows: Navigating Security Risks with Human Insight” with Dwayne McDaniel

7:30pm to 9:00pm

Hacker Charlatan Gameshow –
Sponsored by OffSec
Hosted by Lintile
(Held in Talk Track 2)

10:30am to 10:55am

“A New Era of Brute Forcing in Active Directory” with David Horak

11:00am to 11:25am

“Why Your Email Matters” with BitsDanceForMe

11:30am to 11:55am

“Crypto Agility Lifecycle: A Backbone of a Resilient System” with Sandip Dholakia

12:00pm to 12:25pm

“Lies, Lures, and LLMs; Augmenting Cyber Deception with AI” with Dylan Shroll

12:30pm to 12:55pm

“The Cost of an Incident” with Amanda Draeger

1:00pm to 1:25pm

“Which Witch is Which – Navigating the Complicated World of Threat Actor Taxonomy” with Jeffrey Bell

1:30pm to 1:55pm

“Going Beyond Box Checking with Annual Pentests” with Sean “4dw@r3” Juroviesky

2:00pm to 2:25pm

“Solving Secrets Sprawl Takes More Than Security: Why Machine Identity Is Everyone’s Problem” with Dwayne McDaniel

2:30pm to 2:55pm

“Prescription for Security: Hardening Healthcare Email Against Advanced Threats” with Akash Parasumanna Sridhar

3:00pm to 3:25pm

“Introducing a password manager and policy” with L

3:30pm to 3:55pm

“Things didn’t go as planned… because you didn’t have a plan” with 0DDJ0BB

4:00pm to 4:25pm

“Forged in Fire: Building Elite Cybersecurity Teams with a Warrior’s Mindset” with Chris Reider

4:30pm to 4:55pm

“Maturing your cyber deception program: what’s the plan?” with Suril Desai

5:00pm to 5:25pm

“Beyond the SLA: Measuring What Truly Matters” with Swati Babbar and Kashif Memon

5:30pm to 5:55pm

“Adventures in the Underland: Uncommon Hacker’s Persistence Methods and Countermeasures” with Paula Januszkiewicz

9:00pm to 1:00am
Sober Games

Sponsored by Stellar Cyber
Hosted by Sober in Cyber
Tunes by DJ Selina Style
Mocktails (Drink Tickets Required) and Food
*No Alcohol Allowed*
9:15pm: Ghost Hunt in The Congress Hotel – RPG
9:30pm: Backdoors & breaches – Tabletop
(Held in Talk Track 3)

10:00am to 10:50am

“Breaking the CI/CD Chain: Security Risks in GitHub Actions” with Alexey Shchukarev

11:00am to 11:50am

“Can opposites attract? Domain Admins – meet Red Tenant” with Eric Woodruff and Jake Hildreth

12:00pm to 12:50pm

“Analysis without Paralysis: Mastering the Art of Investigation” with Terryn Valikodath

1:00pm to 1:50pm

“My Cyber Sense Is Tingling! Detection Engineering With Free Tools” with Matthew Gracie

2:00pm to 2:50pm

“You Need a Jay-z and a Beyoncé: How Sponsors and Mentors Can Supercharge Your Career in Cybersecurity” with Anthony Hendricks

3:30pm to 4:30pm

10:30am to 10:55am

“Business Logic Flaws: How to Prevent Them in Your Web Apps” with Antoine Carossio

11:00am to 11:25am

“The Death and Rebirth of Vulnerability Management” with HD Moore

11:30am to 11:55am

“Advancing from Individual Contributor to Cybersecurity Leader” with Kevin Bong

12:00pm to 12:25pm

“Introducing QELP: Parsing ESXi Logs for Incident Response” with Phalgun Kulkarni, Partha Alwar, and Mitchell Green

12:30pm to 12:55pm

“Agents of Change: Practical Adoption Framework for Agentic AI in Security Operations” with Ryan Rowclifffe

1:00pm to 1:25pm

“Adaptive Risk-Tiered Framework for Responsible AI Governance” with Sky Bell

1:30pm to 1:55pm

“Hunting Path Traversal in Open Source” with Nishant Jain

2:00pm to 2:25pm

“Flipping the Script: Threat Intelligence Mining of Ransomware Chat Leaks” with Mark Reibel

2:30pm to 2:55pm

“The False Sense of Security: Defense Becoming a Vulnerability” with Nathan Eades

10:00am to 10:50am

“Firewalls and Fire Alarms: What to Do When Your Best Defenses Go Up in Smoke” with Dr. Catherine J. Ullman

11:00am to 11:50am

"Inboxfuscation: 𝓞ut-of-the-Box Mailbox 𝓞bfscation – Turning BEC into Business Email Chaos" with Andi Ahmeti

12:00pm to 12:50pm

“Cultural Due Diligence: Hard Won Lessons from My Job Hunt” with Munish Walther-Puri

1:00pm to 1:50pm

“UNFAIR after all; Critical considerations for risk management frameworks” with Jack Burgess

2:00pm to 2:50pm

“Threat hunting in the browser” with Luke Jennings