SCHEDULE

All Blue Team Village content including talks, workshops and contests, will be held at the Flamingo. If you're attending a talk or contest, it will be held within the Village at the Flamingo. If you're attending a workshop, it will be held at the Flamingo but please check your ticket for the specific room.

Friday: Village Workshops And Talks

Savoy Ballroom, Flamingo (Blue Team Village)

09:00: Bia Hak Lab CTF Day 1 Starts (During Village Hours Only)

09:00: Threat Hunting With The Elastic Stack (4H Workshop)

14:00: A Theme Of Fear: Hacking The Paradigm (1H Talk)

15:00: Detection At Google: On Corp And Cloud (1H Talk)

16:30: Blue Team Guide For Fresh Eyes (30M Talk)

17:00: The Cyber Threat Intelligence Mindset (30M Talk)

17:30: Serverless Log Analysis On AWS (30M Talk)

18:00: Bia Hak Lab CTF Day 1 Finishes (During Village Hours Only)

Friday: DEF CON Workshops Space

Valley Of Fire 1, Flamingo (DEF CON Workshop Space)

09:00: Threat Hunting With ATT&CK On Splunk (2H Workshop)

11:30: The "Art" of BEC (2H Workshop)

14:00: Malware Traffic Analysis Workshop (4H Workshop)

Valley Of Fire 2, Flamingo (DEF CON Workshop Space)

09:00: Deep Infrastructure Visibility With Osquery And Fleet (4H Workshop)

13:30: MEDIC! Malware Response 101 From The Trenches (2H Workshop)

16:00: Blue Teaming For Fun And The Sake Of Your Organization (2H Workshop)

Lake Mead 1, Flamingo (DEF CON Workshop Space)

09:00: Cyber Fire Puzzles Part 1 (4H Workshop)

14:00: Cyber Fire Puzzles Part 2 (4H Workshop)

Lake Mead 2, Flamingo (DEF CON Workshop Space)

09:00: Tracer FIRE Part 1 (4H Workshop)

14:00: Tracer FIRE Part 2 (4H Workshop)

Friday: Blue Team Village After Dark

Planet Hollywood (BTVAD Badge Only Event)

Saturday: Village Workshops And Talks

Savoy Ballroom, Flamingo (Blue Team Village)

09:00: Bia Hak Lab CTF Day 2 Starts (During Village Hours Only)

09:00: Introduction To Mac-Centric Incident Response Tools And Techniques (4H Workshop)

13:00: Security Strategy For Small-Medium Business (1H Panel)

14:00: Anatomy Of A Megabreach: Equifax Report (1H Talk)

15:00: Memhunter - Automated Hunting Of Memory Resident Malware At Scale (30M Talk)

16:30: When A Plan Comes Together: Building A SOC A-Team (30M Talk)

17:00: Extending Zeek For ICS Defense (30M Talk)

17:30: Killsuit - How The Equation Group Remained Out Of Sight For Years (30M Talk)

18:00: Bia Hak Lab CTF Day 2 Finishes (During Village Hours Only)

Sunday: Village Talks And Closing Ceremony

Savoy Ballroom, Flamingo (Blue Team Village)

09:00: Evaded MicrosoftATA? **But** You Are Completely Exposed By Event Log (1H Talk)

10:00: Who Dis? Who Dis? The Right Way To Authenticate (1H Talk)

11:00: BloodHound From Red to Blue (1H Talk)

12:00: An Introduction To Malware Analysis (1H Talk)

13:00: Blue Team Village Closing Ceremony (See You Next Year!)