BEGIN:VCALENDAR
VERSION:2.0
PRODID:Data::ICal 0.24
BEGIN:VEVENT
DESCRIPTION:   'Title: Sold Out - AWS Principal Threat Hunting: Behavioral 
 Baselining\n   for Malicious Activity\n   Tags: DEF CON Workshop | DEF CON
  Workshops\n   When: Friday\, Aug 7\, 14:00 - 17:59 PDT\n   Where: LVCCW L
 evel 2 W228 (Workshops) - [1]Map\n\n   Description:\n\n   Cloud security e
 ncounters attacks that elude standard detection. In\n   AWS\, unauthorized
  access keys are a common cause of breaches. The\n   vastness of AWS‚ÄÃ
 ®over 450 services and 20\,000 API\n   actions—complicates threat vi
 sibility and exposes gaps in\n   traditional tools.\n\n   This workshop em
 powers participants with direct\, hands-on experience\n   using the AWS Th
 reat Hunter tool to improve threat detection.\n   Attendees will focus on 
 building behavioral baselines and leveraging\n   data-driven analysis to d
 etect subtle AWS principal anomalies\,\n   enabling more precise detection
  than traditional event monitoring.\n\n   Attendees will move beyond stand
 ard techniques by building multi-stage\n   detection pipelines that create
  individualized baselines for each IAM\n   principal and systematically fl
 ag personalized deviations\, linking\n   outliers directly to risks.\n\n  
  SpeakerBio:  Rodrigo "Sp0oKeR" Montoro\n\n   Rodrigo Montoro is the CTO a
 t Clavis Security\, bringing over 25 years\n   of leadership and technical
  expertise to the information technology\n   and cybersecurity landscape. 
 Throughout his career\, Rodrigo has been a\n   pioneer in open-source secu
 rity\, specializing in incident detection\,\n   response\, and Cloud Secur
 ity. A two-time patented inventor\, he holds\n   proprietary technologies 
 for detecting malicious digital documents and\n   analyzing malicious HTTP
  traffic. With a resume that includes key\n   research roles at Tenchi Sec
 urity\, Apura\, Tempest\, Sucuri\, and\n   SpiderLabs\, Rodrigo is a globa
 lly recognized authority who frequently\n   speaks at elite conferences su
 ch as DEF CON Workshops (2023)\, DEF CON\n   Cloud Village (3x)\, Black Ha
 t Brazil Summit\, SANS (DFIR\, SIEM Summit\,\n   CloudSecNext)\, Source (B
 oston and Seattle)\, Toorcon (San Diego)\,\n   Sector Canada (6x)\, and BS
 idesLV.\n\n   Links:\n       Registration (July 14\, 2026\, Noon US Pacifi
 c) - [2]https://events.humanitix.com/fri_pm_ws3_4091\n   '\n\n   1. #LVCCW
 _Level2_North\n   2. https://events.humanitix.com/fri_pm_ws3_4091\n\n\n
DTEND:20260808T005900Z
DTSTART:20260807T210000Z
LOCATION:DEF CON Workshops - LVCCW Level 2 W228 (Workshops)
SUMMARY:Sold Out - AWS Principal Threat Hunting: Behavioral Baselining for 
 Malicious Activity
END:VEVENT
END:VCALENDAR