Build a Headless SOC at Black Hat: Hands-on Workshop
There's a lot of talk about AI in security operations. Most of it is thought leadership from people who haven't run the agents themselves. This workshop is not that.
Join LimaCharlie, Black Hills Information Security, and Digital Defense Institute for a day of hands-on building at Black Hat, free, in-person, and no slides. Food and drinks will be provided.
Agenda:
12:00pm - The API-driven headless SOC of the future
12:30pm - 6:00pm - Open workshop hours
LimaCharlie CEO Maxime Lamothe-Brassard opens the day with a short technical talk on the headless SOC: why the future of security operations is API-driven, agent-operable infrastructure, not better dashboards or smarter copilots. He’ll demonstrate what it looks like to build operational AI into a SOC from scratch. Live terminal work. No marketing deck.
After that, the day belongs to you.
Ken Westin and Chris Botelho (LimaCharlie solutions engineers) run hands-on workshops for every skill level. Never used LimaCharlie before? No problem. You can build and deploy your first AI agent in minutes and they will walk you through it. Already experienced? Go straight to the advanced material: AI orchestration, multi-agent hunting pipelines, custom bots, and more. The team has a range of workshops ready and will meet you where you are.
Hayden Covington, Eric Capuano, and Whitney Champion will run an open threat hunting lab in the room all afternoon. Real scenarios, real telemetry, no script. Work through detection engineering, adversary analysis, and incident response on infrastructure where every agent is readable and every action is auditable. They teach Advanced Security Operations and Threat Hunting at Black Hat. This is not that course. This is an afternoon of unique, direct access to the same instructors, hands-on, at no cost.
Every workshop runs on a headless, API-driven SOC infrastructure where every agent is auditable, every detection is yours, and nothing is locked behind a vendor dashboard. You will leave with your own AI-engineered creations.
No pitch. No black box. No chatbot. No wrapper. No BS.
Let’s build something real together.
Before you arrive: Create your free LimaCharlie account and your CourseStack account. Setup takes less than five minutes and means you can start building the moment you walk in. Bring your laptop - we’ll have a few demo laptops as well (first come first served).
Sponsors:
LimaCharlie
Black Hills Information Security
Digital Defense Institute
Trainers:
Hayden Covington: SOC SecOps Lead, Black Hills Information Security, Black Hat Trainer (LinkedIn)
Eric Capuano: co-founder of Digital Defense Institute, creator of OpenSOC, SANS DFIR Instructor, Black Hat Trainer (LinkedIn)
Whitney Champion: co-founder of Digital Defense Institute, security infrastructure architect, Black Hat Trainer (LinkedIn)
Maxime Lamothe-Brassard: CEO and co-founder, LimaCharlie (LinkedIn)
Ken Westin, Sr. Solutions Engineer, LimaCharlie (LinkedIn)
Chris Botelho, Sr. Solutions Engineer, LimaCharlie (LinkedIn)