APRIL 28 - MAY 1
Moscone Center | San Francisco, CA
NEW! Corelight is in the North Expo! Visit us at booth N-5881
Uncover EDR evasive threats with Open NDR
Visit our booth and learn how Corelight simplifies triage and accelerates incident response with AI-powered workflows.
Explore how to expand your detection coverage, catch one of our theater sessions, win prizes, and more! Book a demo with us at RSAC.
GRAB SOME GEAR
Stay for a demo, get cool stuff.
Speaking sessions
Pre-event on-demand briefing session

It’s Typhoon Season: What you can do to address attacks that evade EDR
Volt Typhoon and similar campaigns are bypassing traditional EDR with advanced tactics like living-off-the-land and exploiting unmanaged network devices. This session explores how Corelight’s Open NDR platform enhances network visibility, detects evasive behaviors, and offers actionable guidance to improve detection and defense against state-sponsored threats targeting critical infrastructure.
Presented By: Vincent Stoffer, Field Chief Technology Officer, Corelight
Check out this on demand session, available here!
In-person conference sessions
AI, Cybersecurity, Global Threats: A Discussion with Rob Joyce and Brian Dye
Rob Joyce, Former NSA Cybersecurity Director, joins Corelight's Brian Dye for a conversation on the evolving cyber threat landscape. They'll discuss AI's role in security, how nation-state actors target critical infrastructure, and strategies for defending against these threats. Gain insights on balancing innovation with security risks and actionable best practices for organizational resilience.
Presented By:
Brian Dye, CEO, Corelight
Rob Joyce, Former NSA Cybersecurity Director
Date: Wednesday, April 30
Time: 11:40 AM - 12:00 PM
Location: South Expo Briefing Center Located in Booth 1400

Enterprise Security Evolution: The Blindingly Fast and Glacially Slow
For enterprise networks, how quickly do new threats arrive? How long do security improvements take to deploy? What do attackers probe for? How much encryption is actually used? This session will provide a look at this landscape by drawing upon years, in some cases decades, of data from large operational environments, illustrating how some changes are lightning fast while others are glacially slow.
Presented By: Vern Paxson, Co-Founder & Chief Scientist, Corelight
Date: Wednesday, April 30
Time: 1:15 PM - 2:05 PM
Tuesday, April 29th | Partner | Topic + Speaker |
---|---|---|
11:00 AM |
|
From Blind Spots to Clear Sight: How Gigamon + Corelight Enhance Security Javier Inclan, Sr. Technical Product Marketing Manager |
2:00 PM |
|
Dennis Carpio, Head of Global Alliances & Channel |
3:00 PM |
|
Kamilo Amir, Director of Technology Alliances |
4:00 PM |
|
Network Security Integration - Secure your GCP Environment with Ease Pradeep Nair, Product Manager |
Wednesday, April 30th | Partner | Speaker |
---|---|---|
11:00 AM |
|
See More, Stop More: Mandiant Threat Defense + Corelight Open NDR Rob Lowe, Global Security Architect |
3:00 PM |
|
Anupam Vij - Group PM for Azure Networking |
See how Corelight integrates with your existing toolstack, including:





