BSides Vancouver 2026

This hands-on workshop delivers a practical introduction into Threat Hunting, Detection Engineering and Incident Response through Threat Hunting Labs. Participants will investigate real-world intrusions in interactive, production-lookalike environments using authentic forensic artifacts such as system logs, network traffic, and memory data.

Using SIEM platforms including Elasticsearch and Splunk, attendees will develop practical skills in identifying adversary techniques, reconstructing attack timelines, and investigating incidents using structured, repeatable methodologies. The session combines guided walk throughs with independent analysis, making it suitable for both newcomers and experienced information security professionals.

By the end of the workshop, participants will have hands-on experience hunting threats, analyzing forensic telemetry, and responding to incidents using real-world tradecraft.

Technical Requirements:
• Participants must bring a laptop capable of running a modern web browser.