APRIL 28 - MAY 1
Moscone Center | San Francisco, CA
NEW! Corelight is in the North Expo! Visit us at booth N-5881
Uncover EDR evasive threats with Open NDR
Visit our booth and learn how Corelight simplifies triage and accelerates incident response with AI-powered workflows.
Explore how to expand your detection coverage, catch one of our theater sessions, win prizes, and more! Book a demo with us at RSAC.
GRAB SOME GEAR
Stay for a demo, get cool stuff.
Speaking sessions
Pre-event on-demand briefing session

It’s Typhoon Season: What you can do to address attacks that evade EDR
Volt Typhoon and similar campaigns are bypassing traditional EDR with advanced tactics like living-off-the-land and exploiting unmanaged network devices. This session explores how Corelight’s Open NDR platform enhances network visibility, detects evasive behaviors, and offers actionable guidance to improve detection and defense against state-sponsored threats targeting critical infrastructure.
Note: This pre-recorded session will be live on the agenda section of the RSAC Conference website two weeks prior to the start of the event. More details will be provided here once the session launches.
Presented By: Vincent Stoffer, Field Chief Technology Officer, Corelight
In-person conference sessions
AI, Cybersecurity, Global Threats: A Discussion with Rob Joyce and Brian Dye
Rob Joyce, Former NSA Cybersecurity Director, joins Corelight's Brian Dye for a conversation on the evolving cyber threat landscape. They'll discuss AI's role in security, how nation-state actors target critical infrastructure, and strategies for defending against these threats. Gain insights on balancing innovation with security risks and actionable best practices for organizational resilience.
Presented By:
Brian Dye, CEO, Corelight
Rob Joyce, Former NSA Cybersecurity Director
Date: Wednesday, April 30
Time: 11:40 AM - 12:00 PM
Location: Expo Hall Briefing Center

Enterprise Security Evolution: The Blindingly Fast and Glacially Slow
For enterprise networks, how quickly do new threats arrive? How long do security improvements take to deploy? What do attackers probe for? How much encryption is actually used? This session will provide a look at this landscape by drawing upon years, in some cases decades, of data from large operational environments, illustrating how some changes are lightning fast while others are glacially slow.
Presented By: Vern Paxson, Co-Founder & Chief Scientist, Corelight
Date: Wednesday, April 30
Time: 1:15 PM - 2:05 PM
See how Corelight integrates with your existing toolstack, including:





