Conference Description
Key Takeaways
- Focus area: Detection engineering and threat hunting techniques for cybersecurity professionals
- Format: Entirely hands-on learning through workshops, hacking laboratories and capture-the-flag exercises
- Audience: Security analysts, detection engineers, threat hunters and blue team practitioners
- Significance: First DEATHCon event to be hosted in Melbourne, Australia
Introduction
DEATHCon is bringing its globally-distributed cybersecurity conference to Melbourne for the first time, offering Australian security professionals direct access to specialised training in detection engineering and threat hunting. The conference—whose name derives from the acronym DEATH (Detection Engineering And Threat Hunting)—distinguishes itself through a completely hands-on format that prioritises practical skill development over passive presentations.
About DEATHCon
DEATHCon operates as a distributed conference model, hosting events across multiple global locations rather than concentrating attendance at a single venue. This approach allows the conference to serve regional cybersecurity communities while maintaining consistent quality and focus across all sites. The Melbourne event marks the conference’s expansion into the Australian market, reflecting growing demand for specialised defensive security training in the Asia-Pacific region.
The conference centres exclusively on two interconnected disciplines within defensive cybersecurity: detection engineering and threat hunting. Detection engineering involves the systematic creation, testing and refinement of security alerts and detection logic, while threat hunting focuses on proactively searching for adversary activity that may have evaded automated defences. Together, these disciplines form the backbone of mature security operations programmes.
Hands-On Learning Format
Unlike traditional cybersecurity conferences that rely heavily on slide presentations and panel discussions, DEATHCon commits entirely to practical, hands-on learning. The programme comprises three core components: structured workshops, hacking laboratory environments and capture-the-flag competitions.
Workshops provide guided instruction on specific detection engineering and threat hunting methodologies, allowing participants to work through realistic scenarios under expert supervision. The hacking laboratory offers an environment where attendees can experiment with tools and techniques against simulated infrastructure. Capture-the-flag exercises introduce competitive elements that challenge participants to apply their skills under time pressure while solving progressively complex security challenges.
This format reflects broader shifts in cybersecurity professional development, where employers increasingly value demonstrable practical capabilities over theoretical knowledge alone.
Who Should Attend
DEATHCon Melbourne is designed for cybersecurity practitioners working in defensive roles. Security analysts seeking to improve their detection capabilities, engineers responsible for building and maintaining detection logic, and threat hunters looking to refine their investigative techniques will find the programme directly applicable to their daily responsibilities. The hands-on format also suits professionals transitioning into detection-focused roles who need practical experience with relevant tools and methodologies.
The conference’s technical depth assumes participants have foundational knowledge of security operations concepts, making it most suitable for practitioners with existing experience in security monitoring, incident response or related disciplines.