Rapid7's 2026 Global Cybersecurity Summit | Track: Putting Preemptive Security into Action [NA]

In this session, practitioners walk through real-world incident response workflows, highlighting how open-source tools, investigative tradecraft, and red team insights come together during active incidents.

Attendees will see practical Velociraptor use cases, learn how red team techniques inform defensive investigations, and understand how experienced responders think about evidence collection, validation, and decision-making. This session is designed for hands-on practitioners who want to sharpen their skills and better understand how attacks are investigated and contained in practice.