SANS AI Cybersecurity Summit Fall 2026

Mon, Nov 2 - Tue, Nov 3, 2026
12 CPEs (Summit Only)
English

Hilton Arlington Rosslyn The Key & Virtual (ET)

1900 Fort Myer Dr, Arlington, VA 22209, United States

Turbo Boost Engaged

T-MINUS

Days

Hrs

Min

Sec

In the unlit corridors of the network, threats move faster than policy can follow.

One defender stands watch between the perimeter and the breach — unseen, unsleeping, unyielding.

Every login is a test of trust. Every packet, a possibility.

THIS IS THE WATCH. AI CYBERSECURITY SUMMIT — FALL 2026.

Jump to:

Event Highlights
Speakers
Sponsors
Schedule
Location

Summit: Nov 2-3 | Summit Co-Chairs: Rob T Lee & Sounil Yu | CPE Credits: 12

Slide 1 of 2
Slide 2 of 2

What's Next in AI Security

The SANS AI Cybersecurity Summit brings together many of today's most influential voices in AI and cybersecurity to explore how AI is being applied across the security community. From using AI to strengthen security operations to understanding AI-powered attacks, you'll hear practical perspectives from practitioners who are testing, building, and defending with these technologies every day.

Join us in Arlington, VA, to connect with cybersecurity professionals, AI and machine learning experts, and peers who are sharing real-world experiences, innovative approaches, and lessons learned. Through keynotes, technical sessions, lightning talks, and hands-on workshops, you'll discover practical ways to evaluate, adopt, and apply AI in your own environment.

Whether you're leading an AI strategy, evaluating new capabilities for your organization, or putting AI to work in day-to-day security operations, you'll leave with practical insights you can apply right away, along with new connections to a community helping shape what's next.

"The Summit was incredibly insightful, bridging the gap between theoretical AI and practical cybersecurity execution. The focus on both offensive and defensive AI capabilities is exactly what the industry needs right now." - Khaled Ahmed Mossad

What Attendees Say

Slide 1 of 4
This is a critical information-sharing and educational experience, and certainly among the best that SANS hosts. I’d recommend this summit for anyone involved with AI.
Geoff ParkerDiebold Nixdorf Inc.
Slide 2 of 4
The workshop I selected was excellent, with a strong focus on practical labs, and I walked away feeling much more equipped to handle upcoming challenges in machine learning security.
Previous SANS AI Cybersecurity Summit Attendee
Slide 3 of 4
We can always rely on SANS for excellent educational data straight from the trenches.
J. Michael Butler
Slide 4 of 4
Wide array of relevant topics of concern for AI use and risk considerations. One of the best virtual events I've attended.
Eric Vollman

Summit Highlights

Highly Technical Talks, Sessions, and Workshops

Gain deeper understanding of how to deploy AI and Machine Learning across your cybersecurity strategy and operations while securing rapid AI transformation in every business unit.

One-Of-A-Kind Networking with Top Industry Minds

You’ll have the chance to engage with Summit Chairs, speakers, and your peers in the community for deep-dive discussions, and casual chats over breaks, meals, and evening receptions.

Summit Social

The days will be filled with the latest in AI cybersecurity, but the fun goes up a notch at night for those joining us in Arlington.

Solutions Expo Hall

Explore the latest tools and solutions in AI cybersecurity.

Register

Summit Registration

$100 USD

$525 USD*Prices exclude applicable local taxes

In personIncludes

Keynotes, fire-side discussions, lightning talks
Hands-on workshops
Unmatched Networking
Evening Reception
Access to Solutions Expo
Light Breakfast, Lunch, and Breaks with Snacks and Beverages
First Access to Approved Recordings and Decks

Attend In PersonLogin to register

$100 USD*Prices exclude applicable local taxes

Live onlineIncludes

Access to Select Talks
Interactive Chat on Slack
First Access to Approved Recordings and Decks
A SANS AI Cybersecurity Summit online registration includes virtual access to [un]prompted II, October 27-29, 2026, in San Francisco, CA, at no additional cost. Access details will be sent to online ticket holders.

Important Dates

Refund Deadline:: October 14, 2026
Hotel Group Discount Deadline:: October 9, 2026

Summit Chairs

Rob T. Lee

Chief AI Officer and Chief of Research at SANS Institute

Rob T. Lee is Chief AI Officer and Chief of Research at SANS Institute, where he leads research, mentors faculty, and helps cybersecurity teams and executive leaders prepare for AI and emerging threats.

Learn more

Sounil Yu

Co-founder and Chief AI Safety Officer at Knostic

Sounil Yu is the Founder and CTO of Knostic, and a leading voice in AI cybersecurity innovation. He is the creator of the Cyber Defense Matrix and the DIE Resiliency Framework.

Learn more

Thank You To Our Sponsors

Schedule

Showing 13 of 25

Filter by:

Select day:

Breakfast & Credential Pick Up

08:00AM - 09:00AM EST

Opening Remarks

09:00AM - 09:10AM EST

In-Person & Virtual

Presented by

Rob T. Lee

Chief AI Officer and Chief of Research at SANS Institute

Sounil Yu

Co-founder and Chief AI Safety Officer at Knostic

KEYNOTE

Speaker: Morgan Adamski, PWC

09:10AM - 09:35AM EST

In-Person & Virtual

Presented by

Morgan Adamski

Executive Director, U.S. Cyber Command at National Security Agency (NSA)

KEYNOTE

Speaker announcement coming soon!

09:35AM - 10:00AM EST

In-Person & Virtual

KEYNOTE

Speaker announcement coming soon!

10:00AM - 10:35AM EST

In-Person & Virtual

Break & Solutions Expo

10:35AM - 11:00AM EST

In-Person & Virtual

KEYNOTE

Speaker announcement coming soon!

11:00AM - 11:25AM EST

In-Person & Virtual

Fireside Chat with Keynote Speakers

Moderator announcement coming soon!

11:25AM - 12:25PM EST

In-Person & Virtual

Lunch & Solutions Expo

12:25PM - 01:20PM EST

In-Person & Virtual

Panel Discussion - Hack Back

Speaker announcement coming soon!

01:20PM - 02:20PM EST

In-Person & Virtual

Hands-On Workshop

03:00PM - 05:00PM EST

In-Person

Presented by

Joshua Wright

Director and Senior Security Analyst at CounterHack

Investigating AI Threats: Extending Incident Response to the Generative AI Layer

As organizations adopt generative AI on AWS, security teams need to extend their investigation capabilities into the AI layer. In this hands-on workshop, participants work through a realistic multi-phase incident.

Participants will trace a compromised credential from initial exposure through privilege escalation into Amazon Bedrock knowledge bases and AI agents. Using Amazon GuardDuty, AWS Security Hub, Amazon CloudTrail, and Amazon Athena, attendees reconstruct the full attack chain and walk away with the skills to detect, investigate, and respond when threat actors pivot from traditional cloud resources into generative AI workloads.

03:00PM - 05:00PM EST

In-Person

Presented by

Kyle Shields

Security Specialist Solutions Architect at AWS

Hands On Workshop - XBOW

Speaker announcement coming soon!

03:00PM - 05:00PM EST

In-Person

Breakfast

08:00AM - 09:00AM EST

In-Person

Opening Remarks

09:00AM - 09:10AM EST

In-Person & Virtual

Presented by

Rob T. Lee

Chief AI Officer and Chief of Research at SANS Institute

Sounil Yu

Co-founder and Chief AI Safety Officer at Knostic

KEYNOTE

Speaker: Michael Collins, Mastercard

09:10AM - 09:35AM EST

In-Person & Virtual

KEYNOTE

Speaker: Daniel Miessler, Unsupervised Learning

09:35AM - 10:00AM EST

In-Person & Virtual

KEYNOTE

Speaker announcement coming soon!

10:00AM - 10:35AM EST

In-Person & Virtual

Break & Solutions Expo

10:35AM - 11:00AM EST

In-Person & Virtual

KEYNOTE

Speaker announcement coming soon!

11:00AM - 11:25AM EST

In-Person & Virtual

Panel Discussion: The Looming AI Cyber Disaster - Myth or Reality

New speaker announcement coming soon!

11:25AM - 12:20PM EST

In-Person & Virtual

Panelists

Katie Moussouris

Founder and CEO at Luta Security

Facilitated by

Ciaran Martin

Professor, Non-Executive Director, SANS Cyber Leaders Network at SANS

Find Evil! Hackathon: How the Winners Built Autonomous DFIR Agents

The SANS Find Evil! Hackathon challenged participants to build open-source, autonomous DFIR agents capable of analyzing real forensic evidence, tracing conclusions back to verified artifacts, and correcting their own mistakes.

Join first-place winner Caleb Evans and second-place winner Trinity Harrison as they share how they approached the challenge and built two distinct investigative agents. Caleb will introduce Mulder, which conducts a five-phase investigation across disk, memory, network, mobile, and log evidence, then challenges its own conclusions before producing a report. Trinity will discuss TRUDI, a hypothesis-driven agent that uses independent reasoning and adversarial review to identify unsupported claims and reconsider its findings when the evidence disagrees. Caleb and Trinity will walk through how they built their agents, what broke along the way, and where autonomous AI helps and where it still needs a human investigator. Both winning tools are open source, and both are expected to be included in a future release of the SANS SIFT Workstation.

12:20PM - 12:50PM EST

In-Person & Virtual

Break & Workshop Transition

12:50PM - 01:10PM EST

In-Person

Delegating Security Work to AI Agents Without Losing Control

Security teams are starting to hand their AI agents real work, such as triaging alerts, isolating endpoints, and disabling accounts. Each team must decide how much of that work its agents may do without a person approving each action. In this workshop, you’ll learn to choose which tasks an agent may handle on its own, and where a person must approve, override, or roll back its actions.

I’ll walk you through how one security operations team made those choices for its AI agents. In small groups, you’ll then debate the decisions you’d change, such as letting an agent isolate endpoints without approval. You’ll leave ready to run the same debate with your own team.

01:10PM - 03:10PM EST

In-Person

Presented by

Lenny Zeltser

Finding Evil with Mulder: A Hands-On Autonomous DFIR Workshop

Presented by: Caleb Evans

What does an autonomous digital forensic investigation look like in practice? In this hands-on workshop, Find Evil! Hackathon winner Caleb Evans will introduce participants to Mulder, his open-source, agentic DFIR platform built for the SANS SIFT Workstation. Participants will explore how Mulder moves through a five-phase investigation, cataloging forensic evidence, extracting and correlating artifacts across systems, developing findings, challenging its own conclusions, and producing a structured incident report.

Caleb will demonstrate how Mulder uses established forensic tools while maintaining an auditable trail that connects every finding to the underlying evidence.

Along the way, participants will learn how Mulder addresses some of the greatest challenges associated with autonomous AI, including hallucinations, unsupported conclusions, incomplete analysis, and the need for human-verifiable results. Attendees will leave with a practical understanding of how AI agents can accelerate DFIR investigations while preserving evidence integrity, transparency, and analyst oversight.

01:10PM - 03:10PM EST

Hilton Arlington Rosslyn The Key

Hotel Special Rates and Reservations

A special discounted rate of $229.00 S/D plus applicable taxes will be honored based on space availability. A limited number of Government Per Diem rooms at the prevailing rate are available with proper ID.

Overnight self-parking will be discounted to $30 for attendees who book through the links below. Daily drive-in self-parking will be discounted to $20 for SANS attendees.

These rates include Internet in your room and are only available through Friday, October 9, 2026.

Book a Regular Reservation Book a Government Per Diem Reservation

3 Reasons To Stay At The Event Venue

Ultimate Convenience
Eliminate the hassle of daily commutes and wasted travel time. You’ll have everything you need—from your training to dining and amenities—all in one centralized, convenient location.
Seamless Networking Opportunities
Stay where the action is! Maximize your chances to connect with fellow cybersecurity professionals and industry leaders—from impromptu conversations in the lobby to exclusive after-hours events.
All Day, All Event Access
SANS live training events include bonus sessions exclusively at the venue. Staying on-site ensures you won’t miss these opportunities to grow your network and engage with peers beyond the conference agenda.

Three people smiling during a meeting in an office

More Information

Overnight self-parking will be discounted to $30 for attendees who book in the SANS room block. Daily drive-in self-parking will be discounted to $20 for SANS attendees. Venue Parking Details - Self-Parking: $45 per day Rate listed is prevailing and subject to change. Alternative Parking Options - SANS recommends researching nearby parking facilities for more options. Popular parking apps that can help you locate and reserve space during your training: SpotHero, ParkMobile, and ParkWhiz. Distance from Nearby Airport: - Reagan Washington National Airport (DCA): Approximately 4.0 miles. - Dulles International Airport (IAD): Approximately 2.8 miles

SEC536: Adversarial AI - Penetration Testing AI Systems

SANS AI Cybersecurity Summit Fall 2026

Share

Summit: Nov 2-3 | Summit Co-Chairs: Rob T Lee & Sounil Yu | CPE Credits: 12

What's Next in AI Security

What Attendees Say

Summit Highlights

Highly Technical Talks, Sessions, and Workshops

One-Of-A-Kind Networking with Top Industry Minds

Summit Social

Solutions Expo Hall

Register

Summit Registration

Summit Chairs

Rob T. Lee

Sounil Yu

Thank You To Our Sponsors