Event owner lens
Use this record to benchmark whether a comparable event makes the work after the room visible. The score is 35/100, so the next move is to benchmark the weakest pillars before repeating the format.
broadcast-heavy conference agenda analysis
Blueteamcon 2025
This broadcast-heavy conference in Technology / AI / Startup shows 61 visible agenda rows from blueteamcon.com and scores 35/100: a thin but inspectable design signal. The clearest public signals sit in Learning Transfer and Problem Specificity; the main limits are Follow Through and Personalization. Visible mechanisms include Participant work, Network design, and Learning transfer. The public record does not show follow-up or tracking, so the score should be read as design intent rather than durable impact. A practical reading: For a reader, this is a comparison record more than a model to copy: it reads as a broadcast-heavy conference, with the strongest visible signal in learning transfer and problem specificity and the biggest open question around follow through and personalization. The practical test is whether the published agenda connects the room to post-event continuation and evidence. This page is an original public-evidence analysis, not a copy of the source agenda or an endorsement of the event. The score places the visible agenda in the thin outcome architecture band. The strongest visible pillars are Learning Transfer, Problem Specificity, and Future-of-Work Fit; the thinnest visible pillars are Follow Through, Personalization, and Network Design. Visible mechanisms include Participant work, Network design, and Learning transfer. The extracted agenda preview includes 120 visible rows. The most common formats are Unknown, Presentation, and Training; the most common inferred purposes are Unknown, Knowledge Transfer, and Skill Building.
Eight-pillar fingerprint
Hover any pillar to see what it measures and, where it scored low, what the agenda is missing.
Participation Architecture?49
Participation Architecture - 49/100. Participant work, contribution, interaction, and alternatives to passive broadcast.
Follow Through?5
Follow Through - 5/100. Owners, dates, commitments, progress checks, and accountability after the room.Missing: Add named owners, dates, implementation checkpoints, and a visible post-event continuation path.
Problem Specificity?52
Problem Specificity - 52/100. A clear costly problem, objective, decision, or performance target.
Personalization?27
Personalization - 27/100. Role, path, goal, preparation, or connection tailoring for participants.Missing: Create role-based paths, prepared questions, tailored breakouts, or participant-specific next steps.
Network Design?36
Network Design - 36/100. Structured weak ties, bridge-building, mixers, and relationship persistence.Missing: Replace generic networking blocks with designed introductions, ask-offer exchanges, peer groups, or bridge-building rituals.
Learning Transfer?63
Learning Transfer - 63/100. Applied practice, feedback, workplace use, refreshers, and 30-90 day transfer.
Evidence Maturity?45
Evidence Maturity - 45/100. Baseline, comparison, follow-up, isolation, and attribution confidence.
Future-of-Work Fit?52
Future-of-Work Fit - 52/100. Value against time, hybrid reality, accessibility, AI, and meeting load.
Fix the gaps
Field-tested exercises matched to this agenda's weakest pillars, from the exercise library.
Follow Through (5/100)
Exercises that strengthen it: Mental Toughness Workshop • WorkshopBank · 15% Solutions • WorkshopBank · Network Patches
Personalization (27/100)
Exercises that strengthen it: Journey Mapping • WorkshopBank · Group Energiser & Perspective-Changing Exercise - Paradigm... · Photo Storytelling
Network Design (36/100)
Exercises that strengthen it: Fun Trust-Building Group Game for Team Connection - Izzat... · Exciting Group Trust Activity for Building Confidence... · PFP: September 2005
Agenda Preview
The actual agenda we captured. Every block is classified by format and purpose. Open any block to see how we read it; the colored edge shows whether it is participant work, broadcast, logistics, or a showcase.
Room vs wrapper
18 percent of the 120 classified blocks put participants to work; the rest broadcast, show, or handle logistics. That mix is what drives the participation score.
Participant workBroadcastShowcaseLogistics
all event2026 Talks &Trainings are now LIVE! Tickets are on sale now!TrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
all eventTrainingsTrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
all event2026 Training SessionsTrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
all eventKeynote By Jake WilliamsKeynoteExpert framing+
Format · BroadcastKeynoteA featured talk from the stage. Builds awareness and energy, produces no participant output on its own.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventTrainingTrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
all event2025 Training SessionsTrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
all eventKeynote by Aeva BlackKeynoteExpert framing+
Format · BroadcastKeynoteA featured talk from the stage. Builds awareness and energy, produces no participant output on its own.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all event2024 Training SessionsTrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
all event2023 Training SessionsTrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
all eventKeynote by Lesley CarhartKeynoteExpert framing+
Format · BroadcastKeynoteA featured talk from the stage. Builds awareness and energy, produces no participant output on its own.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventKeynote by Tazin KhanKeynoteExpert framing+
Format · BroadcastKeynoteA featured talk from the stage. Builds awareness and energy, produces no participant output on its own.
Evidence basisNo participant output visible from this rowRead from source, no work signal
8:30am to 4:00pmSaturday from .PresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
10:30am to 6:00pmSaturday from . Sunday from .PresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
11:00amSaturday at to Sunday at (Yes, all night).PresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
10:00am to 12:00pmSunday from .PresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
11:00amSaturday at to Sunday at .PresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
6:00pm to 9:00pmRegistration: (Lobby)RegistrationLogistics+
Format · LogisticsRegistrationCheck-in and logistics, not agenda content.
Evidence basisOutcome inferred from formatInferred from format
7:00am to 10:00amRegistration: (Lobby) andRegistrationLogistics+
Format · LogisticsRegistrationCheck-in and logistics, not agenda content.
Evidence basisOutcome inferred from formatInferred from format
8:15am to 8:45amTraining BreakfastTrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
12:00pm to 1:00pmTraining LunchTrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
11:00am to 4:00pmTalk Track 1PresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
8:30am to 8:55amOpening Ceremonies with Blue Team Con Advisory BoardPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
9:00am to 9:45amKeynote : “We’re All Scared, Too: 10 Years of Lessons from Cybersecurity Mentorship” with Lesley CarhartKeynoteExpert framing+
Format · BroadcastKeynoteA featured talk from the stage. Builds awareness and energy, produces no participant output on its own.
Evidence basisNo participant output visible from this rowRead from source, no work signal
10:00am to 10:50am“Who’s to blame for the lack of DEI Opportunities in Cybersecurity? I am.” with Daniel MagallanesPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
11:00am to 11:50am“An Enterprise on Fire: Successful Strategies in Triage” with K “Turb0Yoda” Singh and BluescreenofwinPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
12:00pm to 12:50pm“PCI DSS v4.0 Is Here - Now What?” with Kyle HinterbergPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
2:00pm to 2:50pm“Non-Traditional Paths Into Cyber-Security: How recognizing and targeting complimentary skillsets can ease the skills shortage” with Kayla WilliamsPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
3:00pm to 3:50pm“Defending Beyond Defense” with Dr. Catherine J. Ullman aka investigatorchicPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
5:00pm to 5:50pm“Transforming Vulnerability Management - How CSAF, VEX, SBOMs and SSVC Work Together” with Justin MurphyPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
11:00am to 11:25am“Vulnerability Cognition: Adding Psychology to VulnMgmt Programs” with Nikki RobinsonPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
11:30am to 11:55am“Vulnerability Prioritization: Addressing The Great Debate” with John BehenPanelDiscussion+
Format · BroadcastPanelExperts discuss while the audience watches. Surfaces perspective but rarely creates participant work.
Evidence basisNo participant output visible from this rowRead from source, no work signal
12:00pm to 12:25pm“Building Yourself Into a Strong Identity Practitioner” with Eric WoodruffPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
12:30pm to 1:00pm“From 1-on-1s to 1s and 0s “ with Sochima OkoyePresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
2:00pm to 2:25pm“Can’t Trust These Logs” with Jose A. MartinezPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
2:30pm to 2:55pm“The Anatomy of a Threat Hunting Hypothesis” with Lauren ProehlPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
3:00pm to 3:25pm“Network scanning in the era of IoT / OT: Challenges and solutions for blue teams” with Huxley BarbeePresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
3:30pm to 3:55pm“You have a SIEM, Now What?” with Chris MauldingPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
4:30pm to 4:55pm“The Modern CISO” with Sahan FernandoPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
5:00pm to 5:25pm“Why not all metrics are created equal” with Pedro Jimenez-Hernandez aka spapjhPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
5:30pm to 5:55pm” There is no ‘I’ in team, but if you look closely, there is a me - being the first dedicated security hire and growing a team.” with Mike ShewardPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
7:30pm to 9:00pmHacker Charlatan GameshowPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
8:30pm to 9:30pm3rd Floor FoyerPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
9:00pm to 1:00amNetworking Event and PartyNetworkingRelationship building+
Format · LogisticsNetworkingUnstructured mixing. Can carry incidental connection, but is not scored as designed network work.
Evidence basisOutcome inferred from formatInferred from format
9:00pm to 1:00amBoard and Card GamesPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
9:00am to 1:00pmRegistration and SwagRegistrationLogistics+
Format · LogisticsRegistrationCheck-in and logistics, not agenda content.
Evidence basisOutcome inferred from formatInferred from format
10:00am to 10:50am“Keep the F in DFIR: The Importance of Digital Forensics in Incident Response” with Partha Alwar and Carly BattailePresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
11:00am to 11:50am“Dude, Where’s My Domain Admins?” with Joel M. LeoPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
1:00pm to 1:50pm“HOW TO MAKE AI COMPLY” with Raul Rojas (AKA El Jefe De Security)PresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
2:00pm to 2:50pm“New AI who dis? Building an APT hunting detection pipeline with GPT3” with Matt CoonsPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
3:30pm to 4:30pmClosing Ceremonies with Blue Team Con Advisory BoardClosingOrientation+
Format · BroadcastClosingFormat not classified from the source; treated as a broadcast block by default.
Evidence basisNo participant output visible from this rowRead from source, no work signal
10:30am to 10:55am“Volunteering FTW: A Path to Learning, Career, and Community Growth” with Tabatha DiDomenicoPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
11:00am to 11:25am“Killing the Skills-Gap (from the inside and out)!” with Jacob BondPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
11:30am to 11:55am“How to Deal With Human Malware in the Workplace” with Gary RimarPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
1:00pm to 1:25pm“Smoke and Mirrors: Wasting a hacker’s time with misdirection & obscurity” with Mishaal KhanPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
1:30pm to 1:55pm"Breaking the Mold: The Same Approach to Breaking into Information Security but " with Veran PatelPresentationPacing+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
2:00pm to 2:25pm“Authentication Proxy Attacks: Detection, Response and Hunting” with Chris Merkel and Chester Le BronPresentationKnowledge transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all eventBlue Team Con 2026 Talks and Trainings Are Now Listed June 15, 2026TrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
all eventBlue Team Con 2026 Call for Trainings March 9, 2026TrainingSkill building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisParticipant work is implied by the formatInferred from format
all eventBlue Team Con Announces Keynote, Talks and Training Sessions for 2025 Conference July 29, 2025KeynoteExpert framing+
Format · BroadcastKeynoteA featured talk from the stage. Builds awareness and energy, produces no participant output on its own.
Evidence basisNo participant output visible from this rowRead from source, no work signal
all event2026 Talks &Trainings are now LIVE! Tickets are on sale now!TrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all eventTrainingsTrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all event2026 Training SessionsTrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all eventKeynote By Jake WilliamsKeynoteThought Leadership+
Format · BroadcastKeynoteA featured talk from the stage. Builds awareness and energy, produces no participant output on its own.
Evidence basisMediumRead from source
all eventTrainingTrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all event2025 Training SessionsTrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all eventTrainersUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisLowRead from source
all eventKeynote by Aeva BlackKeynoteThought Leadership+
Format · BroadcastKeynoteA featured talk from the stage. Builds awareness and energy, produces no participant output on its own.
Evidence basisMediumRead from source
all event2024 Training SessionsTrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all event2023 Training SessionsTrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all eventKeynote by Lesley CarhartKeynoteThought Leadership+
Format · BroadcastKeynoteA featured talk from the stage. Builds awareness and energy, produces no participant output on its own.
Evidence basisMediumRead from source
all eventKeynote by Tazin KhanKeynoteThought Leadership+
Format · BroadcastKeynoteA featured talk from the stage. Builds awareness and energy, produces no participant output on its own.
Evidence basisMediumRead from source
8:30am to 4:00pmSaturday from .UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
10:30am to 6:00pmSaturday from . Sunday from .UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
11:00amSaturday at to Sunday at (Yes, all night).UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
10:00am to 12:00pmSunday from .UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
11:00amSaturday at to Sunday at .UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
6:00pm to 9:00pmRegistration: (Lobby)RegistrationLogistics+
Format · LogisticsRegistrationCheck-in and logistics, not agenda content.
Evidence basisMediumRead from source
7:00am to 10:00amRegistration: (Lobby) andRegistrationLogistics+
Format · LogisticsRegistrationCheck-in and logistics, not agenda content.
Evidence basisMediumRead from source
8:15am to 8:45amTraining BreakfastTrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
12:00pm to 1:00pmTraining LunchTrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
11:00am to 4:00pmTalk Track 1PresentationKnowledge Transfer+
Format · BroadcastPresentationSpeakers present, the audience receives. Awareness only unless paired with practice or follow-up.
Evidence basisMediumRead from source
8:30am to 8:55amOpening Ceremonies with Blue Team Con Advisory BoardUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
9:00am to 9:45amKeynote : “We’re All Scared, Too: 10 Years of Lessons from Cybersecurity Mentorship” with Lesley CarhartKeynoteThought Leadership+
Format · BroadcastKeynoteA featured talk from the stage. Builds awareness and energy, produces no participant output on its own.
Evidence basisMediumRead from source
10:00am to 10:50am“Who’s to blame for the lack of DEI Opportunities in Cybersecurity? I am.” with Daniel MagallanesUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
11:00am to 11:50am“An Enterprise on Fire: Successful Strategies in Triage” with K “Turb0Yoda” Singh and BluescreenofwinUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
12:00pm to 12:50pm“PCI DSS v4.0 Is Here - Now What?” with Kyle HinterbergUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
2:00pm to 2:50pm“Non-Traditional Paths Into Cyber-Security: How recognizing and targeting complimentary skillsets can ease the skills shortage” with Kayla WilliamsUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
3:00pm to 3:50pm“Defending Beyond Defense” with Dr. Catherine J. Ullman aka investigatorchicUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
5:00pm to 5:50pm“Transforming Vulnerability Management - How CSAF, VEX, SBOMs and SSVC Work Together” with Justin MurphyUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
10:00am to 10:50am“Scraping new territory: Defending privacy in the new world” with Dana Baril and Steven HsiehUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
11:00am to 11:25am“Vulnerability Cognition: Adding Psychology to VulnMgmt Programs” with Nikki RobinsonUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
11:30am to 11:55am“Vulnerability Prioritization: Addressing The Great Debate” with John BehenUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
12:00pm to 12:25pm“Building Yourself Into a Strong Identity Practitioner” with Eric WoodruffUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
12:30pm to 1:00pm“From 1-on-1s to 1s and 0s “ with Sochima OkoyeUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
2:00pm to 2:25pm“Can’t Trust These Logs” with Jose A. MartinezUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
2:30pm to 2:55pm“The Anatomy of a Threat Hunting Hypothesis” with Lauren ProehlUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
3:00pm to 3:25pm“Network scanning in the era of IoT / OT: Challenges and solutions for blue teams” with Huxley BarbeeUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
3:30pm to 3:55pm“You have a SIEM, Now What?” with Chris MauldingUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
4:30pm to 4:55pm“The Modern CISO” with Sahan FernandoUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
5:00pm to 5:25pm“Why not all metrics are created equal” with Pedro Jimenez-Hernandez aka spapjhUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
5:30pm to 5:55pm” There is no ‘I’ in team, but if you look closely, there is a me - being the first dedicated security hire and growing a team.” with Mike ShewardUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
7:30pm to 9:00pmHacker Charlatan GameshowUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
8:30pm to 9:30pm3rd Floor FoyerUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
9:00pm to 1:00amNetworking Event and PartyNetworkingRelationship Building+
Format · LogisticsNetworkingUnstructured mixing. Can carry incidental connection, but is not scored as designed network work.
Evidence basisMediumRead from source
9:00pm to 1:00amBoard and Card GamesUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
9:00am to 1:00pmRegistration and SwagRegistrationLogistics+
Format · LogisticsRegistrationCheck-in and logistics, not agenda content.
Evidence basisMediumRead from source
10:00am to 10:50am“Keep the F in DFIR: The Importance of Digital Forensics in Incident Response” with Partha Alwar and Carly BattaileUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
11:00am to 11:50am“Dude, Where’s My Domain Admins?” with Joel M. LeoUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
1:00pm to 1:50pm“HOW TO MAKE AI COMPLY” with Raul Rojas (AKA El Jefe De Security)UnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
2:00pm to 2:50pm“New AI who dis? Building an APT hunting detection pipeline with GPT3” with Matt CoonsUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
3:30pm to 4:30pmClosing Ceremonies with Blue Team Con Advisory BoardUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
10:30am to 10:55am“Volunteering FTW: A Path to Learning, Career, and Community Growth” with Tabatha DiDomenicoUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
11:00am to 11:25am“Killing the Skills-Gap (from the inside and out)!” with Jacob BondUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
11:30am to 11:55am“How to Deal With Human Malware in the Workplace” with Gary RimarUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
1:00pm to 1:25pm“Smoke and Mirrors: Wasting a hacker’s time with misdirection & obscurity” with Mishaal KhanUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
1:30pm to 1:55pm"Breaking the Mold: The Same Approach to Breaking into Information Security but " with Veran PatelBreakWellbeing+
Format · LogisticsBreakA pacing or recovery block between sessions.
Evidence basisMediumRead from source
2:00pm to 2:25pm“Authentication Proxy Attacks: Detection, Response and Hunting” with Chris Merkel and Chester Le BronUnknownUnknown+
Format · BroadcastUnknownFormat not classified from the source; treated as a broadcast block by default.
Evidence basisMediumRead from source
all eventBlue Team Con 2026 Talks and Trainings Are Now Listed June 15, 2026TrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all eventBlue Team Con 2026 Call for Trainings March 9, 2026TrainingSkill Building+
Format · Participant workTrainingGuided skill building where participants practice. Counts as participant work and learning transfer.
Evidence basisMediumRead from source
all eventBlue Team Con Announces Keynote, Talks and Training Sessions for 2025 Conference July 29, 2025KeynoteThought Leadership+
Format · BroadcastKeynoteA featured talk from the stage. Builds awareness and energy, produces no participant output on its own.
Evidence basisMediumRead from source
The Full Reading
Why It Ranks This Way +
Calibrated from GES design 41/100 and verified 41/100, then capped for agenda is mostly passive without visible outcome mechanics.
Reader Takeaway. For a reader, this is a comparison record more than a model to copy: it reads as a broadcast-heavy conference, with the strongest visible signal in learning transfer and problem specificity and the biggest open question around follow through and personalization. The practical test is whether the published agenda connects the room to post-event continuation and evidence.
Strongest signals: Learning Transfer, Problem Specificity, and Future-of-Work Fit. Weakest signals: Follow Through, Personalization, and Network Design.
How This Agenda Could Improve +
- Add named owners, dates, implementation checkpoints, and a visible post-event continuation path.
- Create role-based paths, prepared questions, tailored breakouts, or participant-specific next steps.
- Replace generic networking blocks with designed introductions, ask-offer exchanges, peer groups, or bridge-building rituals.
Fastest next move: Add named owners, dated next steps, and a visible continuation path before treating the event as outcome-ready.
Role-Specific Reading +
Sponsor lens
Look beyond exposure. Strong sponsor value would show qualified interaction, problem work, buyer learning, customer evidence, or follow-up. The practical sponsor move is to look for structured introductions, buyer-seller fit, and relationship persistence.
Designer lens
The agenda is useful as a pattern sample from blueteamcon.com. Redesign attention should go first to the lowest-scoring pillars; in practice, turn the thinnest agenda blocks into participant work.
Executive lens
Treat the visible agenda as an operating plan. The executive move is to require owners, dates, and evidence before treating the event as strategic. If owners, proof, and follow-through are not visible, the public record does not yet prove strategic movement.
Aggregator lens
Treat the source URL as evidence, not decoration. The data-product move is to label the source boundary clearly before ranking the record before ranking or syndicating the record.
What GES Means Here +
The Gathering Effectiveness Score is a strict 0-100 public-evidence reading of the agenda across eight pillars. It rewards visible participant work, follow-through, transfer, network design, and proof mechanisms more than polish, speaker fame, attendance, or satisfaction.
Visible mechanisms: Participant work, Network design, Learning transfer.
Evidence boundary: Scores reflect visible agenda/source evidence and should not be read as proof of causal event impact.
Limitations, Score Caps, and Review Flags +
Limitations
- No visible follow-up, progress monitoring, or longitudinal tracking.
- Passive stage formats dominate the visible agenda.
- No baseline measurement is visible.
Score caps
- 34: Agenda is mostly passive without visible outcome mechanics.
Review flags
- Fourth-loop score cap: Agenda is mostly passive without visible outcome mechanics.
- No source-backed follow-up, validation, baseline, tracking, or impact evidence.
- No tracking, validation, feedback, or impact measurement found in the visible source text.
- Original category was unknown; publication category is inferred.
Is this proof the event worked? +
No. This is a strict public-evidence reading of the agenda. Proof would require baseline, comparison, follow-up, attribution, and impact evidence beyond the listing.
What should a reader inspect first? +
Start with the source URL, then compare the eight pillar scores against the agenda rows. The biggest opportunities usually sit in follow-through, evidence maturity, and participant work.
Why publish weak records? +
Weak records are part of the map. They show where public agendas still describe sessions and speakers more often than outcomes, commitments, transfer, or proof.
How should I use the rows? +
Read the agenda rows as the visible design trace: formats, purposes, and evidence labels show what the public source made inspectable, not everything that happened in the room. This is a source-grounded interpretation of the public agenda record, not a copy of the source, and not an endorsement of the event.
Embed the verified badge +
This record is in the hand-verified gold set. Copy the snippet below to embed the verified badge on your own site.
<a href="https://unitedwetransform.com/events/evt_2025_blueteamcon_com_why_attend_blue_team_con_blue_team_con_2025_schedule_blue_t"><img src="https://unitedwetransform.com/badge/ges-verified.svg" alt="GES verified by United We Transform" height="40"></a>Where To Go Next
Compare this agenda against other Technology / AI / Startup events scored on the same eight pillars.