Heavyweights: Threat Hunting at Scale
08-12, 15:00–16:00 (US/Pacific), Main Stage (In-person)

Panel Discussion discussing how evolving techniques for defenders is amplified, from some of the teams behind the blogs.


Panel Discussion discussing how evolving techniques for defenders is amplified, from some of the teams behind the blogs.

Mick Baccio fell in love with the idea of cybersecurity at nine years old after reading Neuromancer, thinking "I should do that."
After an alphabet soup of federal agencies and a stint as the first CISO of a POTUS campaign, he is currently a Global Security Advisor at SURGe. He is still trying to do 'that'.
Air Jordans, Thrunting, Puns. Not sure the order.

Jamie is an adversary emulation engineer for The MITRE Corporation where he works with amazing people on various exciting efforts involving security operations and research, mostly focused on adversary emulation and behavior-based detections. He leads the development of MITRE ATT&CK® for Enterprise and has also led teams that help shape and deliver the “adversary-touch” within MITRE Engenuity ATT&CK Evaluations as well as the Center for Threat-Informed Defense (CTID).

This speaker also appears in:

Ryan Kovar joined Splunk in 2014 and currently serves as a Distinguished Security Strategist and leader of SURGe, Splunk’s “Blue-collar for the Blue team” strategic security research arm. With over 20 years of experience as a security analyst, threat hunter, defender, and Unix plumber. Before joining Splunk, he worked at organizations like DARPA, US Navy, UK Home Office, and various public/private companies, always in a security practitioner or leader role. Ryan has an MSc in Cyber Security from the University of Westminster, more certifications than he remembers, and has an abject hatred of printers.

Sean is the CISO and Chief Paranoid of Yahoo. Before joining Yahoo 8 years ago, he spent time at Google and the NASA Office of Inspector General investigating cybercrime, where he focused on botnet, computer intrusion, and child exploitation cases.

Sherrod DeGrippo is the Vice President of Threat Research and Detection for Proofpoint, Inc. She leads a worldwide malware research team to advance Proofpoint threat intelligence and keep organizations safe from cyberattacks. With more than 17 years of information security experience.

Ashlee is an astrophysicist turned security researcher whose experience spans across detection and response, threat hunting, outreach, and developing successful threat intelligence programs. In her current role, when she is not protecting Ukrainian infrastructure, she focuses on strategic and cohesive use of threat intelligence both across the Talos organization and within greater Cisco. Outside of the security world, Ashlee is also a nationally competitive Olympic Weightlifter and a current MBA candidate at the University of Maryland.