Conference Description
Key Takeaways
- First European conference dedicated exclusively to threat hunting practices and methodologies
- Two-day programme combining technical presentations with interactive round table discussions
- Topics include threat hunting frameworks, AI-driven hunting techniques, telemetry strategy, and team development
- Designed for enterprise security teams, cybersecurity vendors, consultants, and independent researchers
- Round table sessions operate under Chatham House Rule to facilitate candid knowledge exchange
Introduction
HUNTCON 2027 represents the first conference in France dedicated exclusively to threat hunting, addressing a notable gap in the European cybersecurity events calendar. Scheduled for March 4–5, 2027, at EDENN, Schneider Electric’s headquarters in Nanterre near Paris, the conference brings together practitioners, security leaders, researchers, and technology specialists from across Europe. The event arrives at a time when organisations face increasingly sophisticated adversaries and must move beyond reactive security postures toward proactive threat detection capabilities.
About HUNTCON 2027
Organised by Sébastien Damaye and sponsored by Schneider Electric, HUNTCON 2027 was conceived to fill the absence of in-person European gatherings focused specifically on threat hunting as a discipline. While broader cybersecurity conferences often include threat hunting as a peripheral topic, this event places it at the centre of all programming. The intimate format accommodates approximately 110 participants, fostering meaningful connections between attendees rather than the anonymity common at larger industry gatherings.
The two-day structure reflects the dual nature of effective threat hunting work: technical depth combined with collaborative problem-solving. Day one delivers keynote presentations, technical talks, case studies, and demonstrations from active threat hunting teams and industry specialists. Day two shifts to interactive round tables where participants engage directly with peers on operational challenges and emerging approaches.
Technical Programme and Discussion Themes
The conference programme addresses several interconnected challenges facing modern threat hunting operations. Threat hunting frameworks provide the methodological foundation, establishing repeatable processes for hypothesis generation, data collection, and investigation workflows. These frameworks help organisations mature from ad-hoc hunting efforts to systematic programmes that deliver consistent results.
AI and agentic threat hunting represents one of the more forward-looking topics on the agenda. As machine learning capabilities advance, security teams are exploring how automated agents can augment human analysts by processing vast telemetry volumes, identifying anomalous patterns, and prioritising investigation leads. The practical implementation of these technologies raises questions about trust, validation, and the appropriate division of labour between human expertise and algorithmic assistance.
Telemetry strategy forms another critical discussion area. Effective threat hunting depends entirely on visibility, yet organisations often struggle with gaps in log collection, inconsistent data quality, and the challenge of correlating information across diverse environments. Round table discussions will examine how teams approach telemetry architecture decisions and balance coverage against storage and processing costs.
Measuring hunting value addresses the persistent difficulty of demonstrating return on investment for proactive security activities. Unlike incident response, where metrics such as mean time to detection provide clear indicators, threat hunting outcomes can be harder to quantify. Sessions will explore how teams communicate their contributions to organisational leadership.
Collaborative Knowledge Exchange
HUNTCON places particular emphasis on peer-to-peer learning and open discussion. All round table sessions operate under the Chatham House Rule, permitting participants to use information shared during discussions while protecting the identity of speakers and their organisations. This approach encourages candid conversation about real-world challenges, failures, and lessons learned that might otherwise remain unspoken in more public settings.
Building hunting teams emerges as a recurring theme, reflecting the talent and organisational challenges many enterprises face. Establishing effective threat hunting capabilities requires not only technical skills but also the right reporting structures, management support, and integration with broader security operations.
Who Should Attend
HUNTCON 2027 is designed for professionals actively engaged in or building threat hunting capabilities. The expected audience includes enterprise security teams responsible for proactive threat detection, cybersecurity vendors developing hunting tools and platforms, consulting firms advising clients on security operations, and independent researchers contributing to the broader threat intelligence community. The focused scope ensures discussions remain relevant and technically substantive throughout the programme.