Cons & Conferences

Legendary hacker con. Huge variety of CTI-relevant talks, CTFs, and villages. Very informal.

☞ My most favoritest con ❤️

Professional training and vendor-heavy con with CTI, malware, and red/blue track overlap.

Huge enterprise security conference. High-level CTI briefings and leadership networking.

One of the most respected IR/CTI conferences. Strong technical and operational CTI content.

Top-tier intel conference with practitioner-level CTI workflows, tooling, and case studies. SANS renames the exact summit URL every year, so this links to their full summit list, search it for the current CTI Summit.

☞ My other most favorite. LOVE LOVE LOVE.

MITRE's con for adversary behavior mapping and detection engineering. Very technical and free.

Research-heavy with a mix of CTI, malware analysis, and international threat sharing.

Local, low-cost conferences often with high-quality talks. Check your city's chapter.

Midwest hacker conference with a fun, laid-back vibe. Great CTI and DFIR content.

☞ Love for my Michiganders 🏒

Chicago-based infosec con with a heavy red/blue team focus. Great CTI and OSINT talks.

Wisconsin's largest hacker conference. Villages, hands-on workshops, and a great way to meet the Midwest security scene.

Hands-on detection engineering and threat hunting conference: workshops, a hacking lab, and CTFs, with in-person meetups in multiple cities.

A great CTI-focused con I've spoken at myself, covering intrusion analysis and OSINT tradecraft.

Diversity-focused con with a wide range of security talks including OSINT and CTI tracks.

Free annual virtual conference from CyberSpeak Labs, raising money and awareness for a nonprofit each year. Run by Reanna Schultz, who I had the pleasure of sharing a panel with.

More on open-source and infrastructure security than raw CTI, but still relevant.

Focused on Canadian cyber threat sharing and CTI workshops. Great for North American pros.

Not a formal conference but has excellent CTI-centric events and briefings.