Conference Description
Key Takeaways
- Workshop-driven conference focused on detection engineering and threat hunting, running November 13-14, 2026
- Hybrid format with online access and in-person gatherings at multiple international locations
- Technical content covers query writing in KQL, Splunk and Elastic, YARA rule creation, malware analysis and purple teaming
- Designed for detection engineers, threat hunters, SOC analysts and incident responders at all experience levels
- Pay-what-you-can pricing model with asynchronous content and live Discord support
About DEATHCon
DEATHCon is a globally-distributed cybersecurity conference built around practical workshops rather than traditional presentations. The event combines pre-recorded instructional content with live support through Discord, allowing participants to work through technical exercises at their own pace while accessing real-time assistance.
The hybrid format enables both virtual attendance and in-person participation at multiple international locations, with all core content available online. This structure supports flexible access through a pay-what-you-can pricing model.
Technical Focus Areas
Workshops form the central component of DEATHCon, covering practical detection engineering and threat hunting techniques. Participants work with offensive security tools for purple teaming exercises, write detection queries across platforms including KQL, Splunk and Elastic, and develop YARA rules for threat identification.
Additional technical content addresses malware analysis and building malware analyzers using machine learning. The event incorporates hacking labs and capture-the-flag activities alongside structured workshops. Technologies featured include Velociraptor, Mythic C2 Framework and Sentinel.
Who Should Attend
DEATHCon targets security operations professionals seeking practical skill development. The audience includes detection engineers, threat hunters, SOC analysts, incident responders, security researchers and purple teamers. Content accommodates practitioners from entry-level through senior positions across industries with security operations functions. The event specifically addresses challenges in building and operationalizing detection capabilities, applying security tools in practice and staying current with threat hunting methodologies.