For any security professional who wants to work smarter, not harder, this workshop will show you how to become more efficient with Elastic. It is a hands-on, practical session designed for SOC Analysts, Security Engineers, Incident Responders, or Threat Hunters with experience in security operations.

This workshop is a blend of conceptual explanations and practical application. We will provide short, focused introductions to the core concepts, then immediately dive into hands-on exercises. You will work directly with the latest innovations in Elastic Security, including our AI Assistant and Attack Discovery, and see their impact in a live Capture the Flag challenge. Participating in the CTF recommended  basic familiarity with Elastic's UI and querying tools.

The workshop is split into two focused, practical sections:

1. AI-Driven Security Analytics: Learn how to use AI to improve your security operations workflows. We will guide you through the full lifecycle of threat management, from initial alert triage to root cause analysis. The agenda includes:
      - Alert Prioritization and Investigation: Learn how to focus your time in the alert funnel and use the AI Assistant for alert summarization and event correlation.

2. Hunt the Adversary CTF: Put your skills to the ultimate test in a gamified Capture the Flag competition.
You will step into the role of a security analyst, investigating escalating, real-world attack scenarios, including:
      - Excel Extortion: Uncovering a macro-based initial access vector.
      - Credential Theft: Investigating a sophisticated supply chain compromise.
      - Dark Radiation Ransomware: Analyzing a full attack chain from start to finish.

- Slash Investigation Time: Learn how to use the Elastic AI Assistant to automate repetitive manual tasks and turn hours of analysis into seconds of clarity.

- Precision Under Pressure: Gain the skills to extract more accurate threat insights, reducing noise and focusing your defense where it matters most.

- Future-Proof Your SOC: Master the latest Elastic Security capabilities to elevate your team’s incident response and operational maturity.

- Ready-to-Deploy Strategies: Walk away with a concrete blueprint for leveraging AI within your specific environment—starting Day 1.

February 25, 2026 | Starting at 1:30pm

Join us for lunch! We’ll be hosting a networking lunch at 12:30, an hour before the workshop. Feel free to arrive a little earlier to connect with other participants and make the most of the networking opportunity.