PRACTICAL CYBERSECURITY. HUMAN-VALIDATED AI.

Think like an attacker. Become a stronger defender.

Build the skills to turn threat intelligence into detections—and investigations into action. Real scenarios. Hands-on labs. Expert guidance.

TRAIN•DETECT•DEFEND•TOGETHER
Threat intelligenceDetection engineeringThreat huntingIncident responseAI for defenders

THE TRAINING

Learn it. Investigate it.
Put it to work.

Start with a free session or explore the practical curriculum behind our instructor-led bootcamp.

RED✕BLUE

THREAT-INFORMED. AI-ASSISTED.

FLAGSHIP CURRICULUMINSTRUCTOR-LED

Blue vs. Red with AI

Follow attacker playbooks, investigate the evidence, and build detections you can validate.

Hands-on labsCapstone investigation
Explore the curriculum

Past delivery: DEF CON Training Las Vegas 2026. New dates to be announced.

CTI 101: Threat Intel Meets AI with Carlo Anez Mazurco
35 MIN
FREE TALK · 35 MIN

CTI 101: Intelligence into Action

Connect the intelligence lifecycle, detection engineering, and AI-assisted analyst workflows. Real Jupyter notebooks, synthetic telemetry, and human validation.

THE IGNITECYBER APPROACH

From attacker behavior
to a defensible decision.

01 / UNDERSTAND

Start with the threat.

Study the behavior behind an attack and the evidence it leaves.

02 / PRACTICE

Work the evidence.

Explore endpoint and network telemetry in guided lab scenarios.

03 / VALIDATE

Test your thinking.

Check detections and AI-assisted analysis against the underlying evidence.

04 / COMMUNICATE

Make it actionable.

Explain what happened, what you know, and what to do next.

LEARN TOGETHER

Keep the conversation going.

Join the IgniteCyber Academy Discord community to connect with fellow learners, discuss cybersecurity topics, and continue the conversation around our training and free resources.

Join the IgniteCyber Academy Discord

Connect with fellow learners, discuss cybersecurity topics, and continue the conversation around our training and free resources.

Join us on Discord
FOR SECURITY TEAMS

Build shared skills.
Strengthen the response.

Bring your team’s challenges into the conversation. Explore training built around the investigation and detection skills you need.

Start with your team’s goals.

  • •Investigating endpoint and network evidence
  • •Turning threat intelligence into detections
  • •Practicing collaborative incident decisions
  • •Using AI with evidence and human review

We’ll discuss your audience, current skill level, preferred format, and technical environment.

PAST EVENT · LAS VEGAS 2026

Were you at the DEF CON bootcamp?

Find the archived event pages, onboarding, and setup guides.

Open the event archive

THE PEOPLE BEHIND THE PRACTICE

Learn with
IgniteCyber Academy.

We connect attacker behavior with the work of the defender: understanding threats, investigating evidence, and making better decisions together.

Our approach pairs practical exercises with thoughtful use of AI. The analyst stays accountable for the conclusion.

Carlo Anez Mazurco

Instructor · CTI, Detection & AI-Assisted Defense

Practitioner and educator focused on cyber threat intelligence, detection engineering, and responsible AI-assisted SOC workflows. Presenter of CTI 101 and instructor of the Blue vs. Red with AI bootcamp.

MM

Malvika Mishra

Cyber Security Engineer · Lab Engineering & Instruction

Malvika is a Cyber Security Engineer at Cause Finder with an M.S. in Cybersecurity from the University of Maryland (2025) and GIAC GSEC and GCCC certifications. She supported lab preparation, technical delivery, and student troubleshooting as a teaching assistant for the Blue vs. Red with AI bootcamp at DEF CON Training Las Vegas 2026.

BEFORE YOU START

A few useful answers.

Where should I start if I am new to IgniteCyber Academy?
Start with our free 35-minute video session, ‘CTI 101: Cyber Threat Intelligence, Detection Engineering & AI’, led by Carlo Anez Mazurco. It walks through our teaching philosophy, hands-on Jupyter/MSTICpy workflows, and how threat intelligence converts into tested Sigma detections. Then explore our learning focus guides to see which domain fits your goals.
Is the DEF CON Training Las Vegas bootcamp still open for registration?
When will future cohorts or public bootcamp dates be announced?
New public cohort dates and venues are currently in development. You can submit an inquiry through our Contact page or team training page to be notified as soon as new schedules are finalized, or to discuss bringing the curriculum directly to your organization.
How is AI used in IgniteCyber Academy training?
AI is taught as an analyst-assistance accelerator, not as a replacement for human reasoning. Students learn to use local or private LLMs (such as Ollama) to draft query syntax, summarize verbose logs, and generate investigation hypotheses. Every conclusion must be manually verified against observable telemetry, artifacts, and evidence before any defensive action is taken.
What equipment do I need for hands-on training?
For live bootcamp deliveries, cloud-hosted lab environments with browser or RDP access are the primary training method. Students need a modern laptop (16 GB RAM recommended, 32 GB preferred) with administrative privileges, reliable internet access, and a modern browser. For local backup setups, Docker Desktop (on Apple Silicon Mac or PC) or standard virtualization platforms are used.
Where can I connect with the IgniteCyber community?
Join the IgniteCyber Academy Discord community to connect with fellow learners, discuss cybersecurity topics, and continue the conversation around our training and free resources.Join us on Discord

YOUR NEXT INVESTIGATION STARTS HERE

Train. Detect. Defend.
Together.