From signals to stories: Don't just go with the (net)flow

Modern SOCs are drowning in data but starving for context. As state-sponsored actors like Volt Typhoon and Salt Typhoon perfect the art of using "Living off the Land" (LotL) techniques, they've learned to hide in the noise of legitimate administrative traffic. If your network detection strategy relies on Firewall logs and NetFlow. You are only seeing the "signals" while the "story" remains invisible.

This talk breaks down why traditional logs fail to catch modern APTs that bypass EDR and blend into the background. We will explore why transactional data is considered the "ground truth" required to unmask stealthy lateral movement. Finally, we'll also provide a future look at the AI arms race: where attackers use AI to craft perfect lures, defenders must realize that their AI is only as good as the data it consumes. In the world of autonomous SOCs, transactional data isn't just a log—it's the rocket fuel that makes defensive AI actually work.

Date: Wednesday 6 May 2026
Time: 11:00 - 11:30 AM
Location: Theater 8
Reserve your spot 

Leveling the Playing Field: Using Agentic AI and Network Evidence to Win the Cyber Arms Race

AI is the biggest disruptive force in cybersecurity and arguably beyond that in the wider world. This talk will explain how advanced adversaries are leveraging agentic AI to deliver sophisticated campaigns at massive scale and terrifying speed and how this contrasts with the defensive capabilities of most organisations right now. 

We'll also cover specific changes in adversary tactics to avoid EDR tools and what this means for defenders. We'll wrap up with a look at how defenders are introducing AI into their SOC and some important considerations for the journey to the agentic AI SOC. 

Date: Thursday 7 May 2026 
Time: 11:00 AM - 11:30 AM
Location: Theater 8

Download NDR for Public Sector