Black Hat USA 2026 Conference

Choice of Model vs. Choice of Data: What Actually Powers an AI SOC?

What's more important for the AI SOC, choice of model or choice of data? To explore this question, we asked specialized agents to compete in a realistic Capture the Flag (CTF) exercise inspired by the Volt Typhoon threat actor, and we ran dozens of simulated competitions. Come hear Corelight Co-Founder Greg Bell talk about our surprising conclusions, along with techniques for increasing the inference ceiling of your AI SOC.

When:

Tuesday, August 4th: 5:00pm PT
Wednesday, August 5th: 10:00am & 2:00pm PT

Where:

Corelight Booth #3940 (Business Hall: Bayside A-D, Mandalay Bay Convention Center)
No special pass required, any conference pass holder can access this session in our booth

Corelight Open NDR helps defend Black Hat events

Year four—and we’re still thrilled to join forces with the Black Hat NOC and other distinguished best of breed vendors. We’ll be helping defend the conference network with our NDR technology alongside Arista Networks, Cisco Secure, Jamf, Lumen, and Palo Alto Networks.

Check out our latest blog NOC posts:

Black Hat Asia 2026: Everything from cat feeders to solar farms
Black Hat USA 2025: Back in the NOC: A familiar mission, new crew
Black Hat NOC: Findings from Europe & Thoughts for Asia 2024
Detections and Findings using Corelight in the Black Hat Asia NOC 2023

Pass Discount:
Discount Code: CORELIGHT

$200 off Briefings Pass OR $100 off Business Pass current pricing

Registration link

Grab some gear

Stay for a demo, get cool stuff.

Book a demo

Discover how Corelight helps analysts and hunters detect DNS tunneling, find threats in encrypted traffic, and more. Set up a demo with a Corelight expert at Black Hat USA.