CYBRARY Schedule
Filter by track. Competition sessions link to their live event pages.
Opening keynote: the practice gap
Why teams that rehearse incidents outperform teams that only read about them.
Main hall · Mara Okafor
Living off the land in 2026: what actually still works
A tour of the built-in tooling attackers reach for first, and the telemetry that catches it.
Main hall · Dmitri Volkov
Cloud posture management without the spreadsheet
Guardrails as code: finding drift before the auditor does.
Room B · Sam Delacroix
Running a SOC through a ransomware weekend: a postmortem
The first 72 hours of a real response, told hour by hour.
Main hall · Lena Hartwig
Hands-on workshop: build your first detection
Bring a laptop — leave with a working detection and the logs to prove it.
Lab room
Tracking initial access brokers
From forum post to fingerprint: following the sellers who open the door.
Main hall · Priya Nair
How we won three majors in a row
Practice routines, team roles and the meta of competitive capture-the-flag.
Main hall · Tom Ikeda
Live capture-the-flag final
The conference final, played live on the big screens. Follow the leaderboard from your phone.
Main hall