Home Podcasts Blueprint: Build the Best in Cyber Defense
Blueprint: Build the Best in Cyber Defense

Blueprint: Build the Best in Cyber Defense

SANS Institute 66 Episodes Jul 2, 2026

Blueprint: Build the Best in Cyber Defense is a podcast for cyber defenders seeking to stay current with the latest tools, technologies, and security concepts. Hosted by John Hubbard and brought to you by the SANS Institute, it features interviews with top security practitioners and in-depth explanations of new technologies, protocols, and defensive tools. The show aims to help listeners take their defense skills to the next level.

Episodes

Building Trust Into Agentic SOC Tools with Oren Saban
Building Trust Into Agentic SOC Tools with Oren Saban Jul 2, 2026 2680 SANS Cloud Security Exchange Summit 2026 - Aug. 17-18, San Francisco: https://www.sans.org/mlp/cloud-security-exchange-2026Save $50 off registration with special promo code "Cloud_Promo50"!Agentic SOC platforms are no longer a future pitch — they're shipping, and teams are using them to triage and investigate cases end to end. But speed and automation only matter if you can trust th
Preventing Silent Failures with Nir Loya Dahan
Preventing Silent Failures with Nir Loya Dahan Jun 18, 2026 3328 This episode is sponsored by Fig.This episode features a conversation with Nir Loya Dahan, Co-Founder and CPO at Fig, recorded at RSAC 2026. Our discussion covers telemetry health and SOC infrastructure resilience: what breaks in a log pipeline, why silent failures are so hard to catch, and how detection teams can build more confidence in their data foundation.Resources:Nir's Email: nir@fig.s
The 2 AM Call: A Ransomware Negotiator's Playbook with Wade Gettle
The 2 AM Call: A Ransomware Negotiator's Playbook with Wade Gettle Feb 9, 2026 2935 What happens after you discover ransomware? You have to talk to the attackers. And that conversation can make or break your entire response.In this episode, Wade Gettle, a professional ransomware negotiator, pulls back the curtain on the high-stakes world of threat actor negotiations. Wade is the person who gets the call at 2 AM when organizations are facing their worst moment, and he's handl
Infiltration Alert! How to Catch Fake IT Employees in Your Network with Zak Stufflebeam
Infiltration Alert! How to Catch Fake IT Employees in Your Network with Zak Stufflebeam Jan 5, 2026 5797 This episode is a big one! We kick off 2026 with a critical lessons learned on how to detect and prevent the threat of fake IT workers infiltrating your organization through the story of a REAL compromise. In this episode, repeat guest Zak Stufflebeam shares a detailed case study involving a major investigation of multiple counterfeit IT employees within a company. The episode provides valuable in
Leading by Example: Confidence and Responsibility in Cybersecurity with Zak Stufflebeam
Leading by Example: Confidence and Responsibility in Cybersecurity with Zak Stufflebeam Aug 19, 2025 3983 In this episode, we sit down with Zak Stufflebeam, Director of Cybersecurity at a publicly traded insurance company. Zak shares his unique journey from the military to leading security operations, emphasizing essential leadership principles learned along the way. From his early days in basic training to leading complex cybersecurity teams, Zak’s story is one of perseverance, adaptability, and unwa
From the SANS Cyber Leaders Podcast: Fighting Back with John Hubbard
From the SANS Cyber Leaders Podcast: Fighting Back with John Hubbard Jun 27, 2025 3141 This podcast episode is from the SANS Cyber Leaders Podcast.The episode features Blueprint host John Hubbard, where he talks with hosts James Lyne and Ciaran Martin on the ever-changing threat landscape and how SOC teams can stay ahead. John shares his expertise on spotting threats early, how to test your defences before the real attackers show up, and why he’s on a mission to simplify cybersecuri
Redefining Security Operations: Lessons in AI Integration with James Spiteri
Redefining Security Operations: Lessons in AI Integration with James Spiteri Jun 12, 2025 4006 In this episode of Blueprint, host John Hubbard sits down with James Spiteri from Elastic to explore the transformative power of AI on the SOC. They delve into how advanced AI technologies, such as agentic AI models, MCP protocol, and automation, are reshaping the SOC landscape. Discover how AI enhances SOC efficiency, reduces mundane tasks, and integrates context-aware capabilities. Learn about t
From Special Forces to Cybersecurity: Rich Greene on Communication and Persuasion in Infosec
From Special Forces to Cybersecurity: Rich Greene on Communication and Persuasion in Infosec Apr 9, 2025 2835 In this episode, we sit down with Rich Greene, a former United States Army Special Forces Green Beret and current SANS instructor for SEC275 and SEC301. Rich shares his incredible journey spanning 20 years in the Army, including his transition from military communication roles into the realm of cybersecurity. He talks about the importance of fundamentals in cybersecurity, the power of effective co
SOC Dashboards Done Right with Ryan Thompson
SOC Dashboards Done Right with Ryan Thompson Feb 18, 2025 3782 In this episode, we sit down with Ryan Thompson, a seasoned expert in building dashboards that actually detect real threats—not just look pretty. With experience at Elastic, Alert Logic, and top EDR vendors, Ryan shares deep insights into the science behind effective dashboards and how security teams can cut through the noise to find the threats on your network.We cover:Why most SOC dashboards fai
Success Simplified - The 3 Step Process for Hitting Your Career Goals in 2025 with John Hubbard
Success Simplified - The 3 Step Process for Hitting Your Career Goals in 2025 with John Hubbard Jan 1, 2025 1798 Surprise!! It's a mini solo episode to kick off the new year and it's on one of the most important topics there is - how to achieve your goals in 2025 and beyond!In this episode I talk about a topic I've never covered anywhere before - my personal system for productivity and how it helps me, and can likely you help you stay on track for those 2025 goals and stay aligned with what is
How Phishing Resistant Credentials Work with Mark Morowczynski and Tarek Dawoud
How Phishing Resistant Credentials Work with Mark Morowczynski and Tarek Dawoud Dec 2, 2024 3243 Mark Morowczynski returns for his 4th(!) time with his Microsoft coworker and identity and authentication expert Tarek Dawoud in this incredibly insightful conversation on the what, why, and how of  phishing resistant credentials that YOU can implement right now! This conversation covers:What makes MFA phishable?What phishing resistant credentials are and how they workThe history and modern method
How GenAI is Changing Your SOC for the Better with Seth Misenar
How GenAI is Changing Your SOC for the Better with Seth Misenar Oct 9, 2024 5704 In this mega-discussion with Seth Misenar on GenAI and LLM usage for security operations we cover some very interesting questions such as: - The importance of natural language processing in Sec Ops- How AI is helping us detect phishing email- Where and how AI is lowering the bar for entry-level security SOC roles- Should we worry about AI hallucinations or AI taking our jobs?- What is a reasoning

Recommended