Skip to content
  • There are no suggestions because the search field is empty.
PROTECTING OVER $1B IN DAILY TRADES
DEFENDING ENERGY FOR 32+M U.S. USERS
SECURING NETWORKS FOR 52K+ TRANSPORT VEHICLES
DEFENDING $10T+ IN MANAGED ASSETS
SECURING 16+M ANNUAL PATIENT VISITS
blackhat_USA_Lockup_26

Visit us at Booth #3940

What powers your AI SOC?

The economics of cyberattacks have changed permanently. The time-to-exploit window that security programs were built for — measured in months — has collapsed to hours. Security leaders building an AI SOC to combat the new reality face a choice. Model or data? What really matters?

Session highlight

Join us in our booth theater

Choice of Model vs. Choice of Data: What Actually Powers an AI SOC?

What's more important for the AI SOC, choice of model or choice of data? To explore this question, we asked specialized agents to compete in a realistic Capture the Flag (CTF) exercise inspired by a range of real-world attack scenarios, and we ran dozens of simulated competitions. Come hear Corelight Co-Founder Greg Bell talk about our surprising conclusions, along with techniques for increasing the inference ceiling of your AI SOC.

When:

  • Tuesday, August 4, 5:00pm PT
  • Wednesday, August 5, 10:00am & 2:00pm PT

Where:

  • Corelight Booth #3940 (Business Hall: Bayside A-D, Mandalay Bay Convention Center)
  • No special pass required, any conference pass holder can access this session in our booth

Network Visibility Stacks the Deck Against Mythos

How Corelight gives defenders the ground truth to catch what prevention misses

Mythos-class models are changing the economics of finding vulnerabilities. What took skilled teams weeks will now happen at machine speed, across more of the stack than any human effort could cover. The result won’t be one dramatic breach. It will be a steady storm of vulnerabilities and bugs surfacing faster than teams can patch.

You can’t out-patch that curve. But attackers still have to move through your network. Every attack generates traffic on the wire, and that evidence doesn’t depend on knowing the vulnerability in advance. Join us to hear how network visibility is the defense that scales and stacks the deck against Mythos-class AI models.

When:

  • Wednesday, August 5th: 2:30pm PT
  • Thursday, August 6th: 11:30am PT

Where:

  • Corelight Booth #3940 (Business Hall: Bayside A-D, Mandalay Bay Convention Center)
  • No special pass required, any conference pass holder can access this session in our booth

Navigating Volt Typhoon with NDR

As sophisticated threat actors like Volt Typhoon shift toward "living off the land" tactics, traditional perimeter defenses are being rendered blind. When attackers use your own legitimate admin tools against you, blending into the noise is their ultimate weapon. This session breaks down how Network Detection and Response (NDR) delivers the deep visibility required to expose hidden, state-sponsored activity inside enterprise networks before the damage is done.

When:

  • Wednesday, August 5, 11:00am PT
  • Thursday, August 6, 11:00am PT

Where:

  • Corelight Booth #3940 (Business Hall: Bayside A-D, Mandalay Bay Convention Center)
  • No special pass required, any conference pass holder can access this session in our booth

Pass discount:
Get our Pass discount:

$200 off Briefings Pass OR $100 off Business Pass current pricing

Discount code: CORELIGHT

Register

Book a demo

Stop by our booth to explore how Corelight's agentic triage automates threat identification and improves triage time by 10x today.

Book now

Grab some gear

Stay for a demo, get cool stuff.

Corelight Open NDR helps defend Black Hat event

Year four—and we’re still thrilled to join forces with the Black Hat NOC and other distinguished best of breed vendors. We’ll be helping defend the conference network with our NDR technology alongside Arista Networks, Cisco Secure, Jamf, Lumen, and Palo Alto Networks.

Check out our latest blog NOC posts:

Black Hat Asia 2026: Everything from cat feeders to solar farms
Black Hat USA 2025: Back in the NOC: A familiar mission, new crew
Black Hat NOC: Findings from Europe & Thoughts for Asia 2024
Detections and Findings using Corelight in the Black Hat Asia NOC 2023

Theater sessions
Corelight Booth #3940

Tuesday, August 4

 

 

5:00 PM

Corelight logo - white version

Choice of Model vs. Choice of Data: What Actually Powers an AI SOC?
Greg Bell, Co-Founder & Chief Strategy Officer, Corelight

6:00 PM

Corelight logo - white version

Corelight Demo
Blake Cahen, Sr. Sales Engineer

kl-pricing-table__tab:hover kl-pricing-table__tab--active

 

Wednesday, August 5

 

 

10:00 AM

Corelight logo - white version

Choice of Model vs. Choice of Data: What Actually Powers an AI SOC?
Greg Bell, Co-Founder & Chief Strategy Officer, Corelight

11:00 AM

Corelight logo - white version

Navigating Volt Typhoon with NDR
Adam Donadeo, Sr. Sales Engineer, Corelight

11:30 AM

Netskope partner logo

Unifying SSE and Open NDR: Full-Spectrum Visibility and Rapid Response for the Hybrid Enterprise
Gary Jenkins, Principal Solutions Architect, Netskope

2:00 PM

Corelight logo - white version

Choice of Model vs. Choice of Data: What Actually Powers an AI SOC?
Greg Bell, Co-Founder & Chief Strategy Officer, Corelight

2:30 PM

Corelight logo - white version

Network Visibility Stacks the Deck Against Mythos
How Corelight gives defenders the ground truth to catch what prevention misses

Vince Stoffer, Field Chief Technology Officer, Corelight

3:30 PM

Keysight partner logo

Precision Data from OT to IT and All the Way to the AI SOC
Eric Floyd, Director of Business Development & Alliances, Keysight

4:00 PM

sentinel-one-logo-light

Network Evidence: A Perfect AI SIEM Compliment
Haig Colter, AVP Strategic Technology Partnership, SentinelOne

kl-pricing-table__tab:hover kl-pricing-table__tab--active

 

Thursday, August 6

 

 

9:30 AM

Endace partner logo

Endace and Corelight: Always-on Packet Capture - the Ultimate Network Forensics for the AI SOC
Michael Morris, Senior Director of Technology Alliances and Global Business Development, Endace

10:00 AM

ElasticLogo_white

ATT&CKing Back: Unified Detection with Corelight & Elastic, Turning Network Traffic into Rocket Fuel for the AI SOC
Darryl E. Peek, II, Vice President of Partnerships, US Public Sector, Elastic

11:00 AM

Corelight logo - white version

Navigating Volt Typhoon with NDR
Adam Donadeo, Sr. Sales Engineer, Corelight

2:30 PM

Corelight logo - white version

Network Visibility Stacks the Deck Against Mythos
How Corelight gives defenders the ground truth to catch what prevention misses

Vince Stoffer, Field Chief Technology Officer, Corelight

kl-pricing-table__tab:hover kl-pricing-table__tab--active

See how Corelight integrates with your existing toolstack, including:

crowdstrike-logo
Mandiant_White
microsoft logo white-png
Splunk-logo
google cloud logo
aws

Book a demo

Discover how Corelight helps analysts and hunters detect DNS tunneling, find threats in encrypted traffic, and more. Set up a demo with a Corelight expert at Black Hat USA.

get-demo-event--graphic

Unlock your AI-powered SOC

Corelight’s Open NDR Platform secures the networks the world depends on with unified visibility across network and cloud environments, autonomous identification of evolving threats with AI-powered multi-layered detections, and threat containment with integrated response.

open-NDR--HeroIllustration