Go Back

SANS Institute Workshop - Hands-on agentic AI for digital forensics and incident response

Josh Lemon
2026-10-14 9:00 am
Workshop
Running Secure Operations
Operational Limits and Failure Modes of AI-Assisted Security

A hands-on SANS FOR508 workshop directs an agentic AI platform through a simulated incident investigation, then reviews, edits and approves each AI finding before it enters the case record.

Get Your Ticket
Josh Lemon is chief of DFIR at SoteriaSec and a SANS instructor, presenting on whether ChatGPT, Claude and Gemini are useful in a real breach investigation.
Josh Lemon
Chief of DFIR
SoteriaSec
Josh Lemon is chief of DFIR at SoteriaSec and a SANS instructor, presenting on whether ChatGPT, Claude and Gemini are useful in a real breach investigation.

There's More Where This Came From

Browse hundreds of sessions and build an agenda around the topics that matter to you.

Full Speaker Lineup
Get Your Ticket
Speaker in a grey suit presenting at a lectern on stage
Woman being interviewed with a Ticker microphone on the expo floor
Audience members smiling and taking photos on their phones during a session
Speaker presenting on stage against a blue and pink backdrop
Attendees wearing CyberCon headphones listening during a session
Panellists seated in white armchairs on stage during a conference discussion
Keynote speaker presenting on stage with a title slide behind him
Speaker addressing the audience with a microphone as a colleague looks on