A Visual Summary of SANS CTI Summit 2026

On January 26-27, attendees joined us in Arlington, VA or tuned in Live Online for the SANS Cyber Threat Intellgence (CTI) Summit 2026.

We invited Ashton Rodenhiser of Mind's Eye Creative to create graphic recordings of our Summit presentations. If you missed a talk or are looking to view the Summit through a visual lens, take a look at the recordings below.

*If you registered for the Summit, video recordings are available on your Summit Access page in your SANS Portal. 

Summit Day 1 – Monday, January 26

Keynote | If Only We Had the Data: A Tale of Mismatched Expectations

Alex Pinto, Director of Threat Intelligence at Verizon DBIR

Operation Trashpanda: Disrupting RaccoonO365’s Phishing Empire

Maurice Mason, Principal Cybercrime Investigator at Microsoft Nick Monaco, Principal Cybercrime Investigator at Microsoft

The C2 You Didn’t See Coming: APT C2 Techniques That Redefine Stealth

Lior Rochberger, Principal Threat Researcher at Palo Alto Networks Tom Fakterman, Senior Threat Researcher at Palo Alto Networks

Hunting North Korea’s State-Sponsored “Contagious Interview” Operation: Attacks on Developers via the Software Supply Chain

Kirill Boychenko, Senior Threat Intelligence Analyst at Socket

Beyond Bullet Points: Visual Intelligence in the Age of AI

Sierra (Stanczyk) Karcher, Intelligence Practices Lead at PwC Global Threat Intelligence David Johnson, Threat Intelligence Advisor at Feedly

Beyond the Perimeter: Building a Ransomware Response Program for Third-Party Risk

Zarin Hamid, CTI Analyst at National Cyber Forensics Training Alliance

Applied Forecasting: Part Deux

Gert-Jan Bruggink, Founder and CEO at Venation Lincoln Kaffenberger, Global CTI Lead at Deloitte Global

Rhadamanthys and The Limits of Private Sector Offensive Operations

Silas Cutler, Principal Security Researcher at Censys

Whenever, Wherever – Blind Eagle Attacks: The Shadow Vector Case

Santiago Pontiroli, CTI Research Lead at Acronis International GmbH

Summit Day 2 – Tuesday, January 27

Keynote | From Theory to Tradecraft: Building Detection Systems to Track AI-Enabled Adversaries

Kyla Guru, Cyber Threats Policy Manager at Anthropic

Malware Magic: Revealing Intel Leads Without Reverse Engineering

Christina Johns, Principal Malware Analyst at Red Canary

Principle of Least AI in Threat Intelligence: A Blueprint for Effective GenAI Adoption

Jitin Shabadu, Security and Risk Analyst at Forrester

Poison in the Digital Well: Intelligence-Driven Defense Against Supply Chain Attacks

Shilpi Mittal, Lead Security Engineer at Tyson Foods Inc.

Can We Forecast Our Own Fate? Mapping the Future of the CTI Industry with SATs

Josh Darby MacLellan, Staff Threat Intelligence Advisor at Feedly

From Overwhelm to Impact: A Prioritization Matrix

Alex Berninger, Senior Manager, Intelligence at Red Canary

From Your Gut to a Gold Standard: Introducing the Admiralty System in CTI

Freddy Murstad, Senior Threat Intelligence Advisor at Intelligence Tradecraft

Knowing When to Quit: A Framework for Managing the Deprecation of Threat Actor Aliases

Nicholas Vidal, Senior CTI Analyst at SecAlliance

Can’t Stop, Won’t Stop: TA584 Innovates Initial Access

Selena Larson, Staff Threat Researcher at Proofpoint

If you'd like to check out our other upcoming Summits, you can view the latest listing here.