About this Event
DEATHCon Prague 2026 is coming!
Join cybersecurity professionals from around the world for a two-day hands-on conference dedicated to Detection Engineering and Threat Hunting (DEATH). It’s an amazing opportunity to connect with the DEATH community in Prague.
DEATHCon is a globally recognized conference series where every location follows the same hands-on workshop format, allowing attendees worldwide to learn, collaborate, and share knowledge with the security community.
Venue
DEATHCon Prague will take place at Zenwork, right in the historic center of the city on Můstek, with an astonishing view of Prague Castle and easy access from the city’s major transport hubs.
Workshops
Every attendee will have access to the complete DEATHCon workshop program. The event is highly interactive: complete workshops at your own pace, collaborate with fellow attendees, and receive guidance from workshop leaders throughout. All workshop instructions are professionally pre-recorded and remain available after the conference so you can revisit the material anytime.
This year’s program includes 31 hands-on workshops across six tracks:
🤖 AI & Agentic Security
- AI Defense Ops: an operational playbook for defending AI systems
- insAIder Threat: hunting authorization abuse across multi-agent AI systems
- Detecting Adversarial Prompts with NOVA Rules: catching malicious prompts before they land
- Polyglot Poisoning: hunting linguistic and multilingual attacks against AI
- Agentic Threat Hunting: building AI hunters that remember what they’ve found
- Detection Engineering Re-AI-magined: rethinking the discipline for the AI era
- VibeRange: agentic, purple-team forensic experiments
🎯 Detection Engineering
- I See Your Rule, And I Raise You A Bypass: adversarial detection engineering through a game-theory lens
- SIEM Rule Bypass Mining 101: finding the gaps in your own rules before someone else does
- Signature, Sequence, Anomaly: layering detection logic that actually holds up
- Hql for Sigma: bridging query logic with Sigma rules
- One Schema to Rule Them All: write-once detection for humans and agents alike
- From Threat Report to Detection Logic: turning CTI into working rules with Detection Wiki
- From Artifact to Alert: converting IR findings into repeatable detections
🕵️ Threat Hunting
- Nodes, Edges, and Evil: graph-based hunting for hidden adversaries
- Living Off the Script: hunting T1059 scripting abuse in the wild
- Threat Hunting in KQL 101: hands-on hunting fundamentals
- Advanced Threat Hunting: reconstructing the full attack chain
- Hunting 101: No AI. Just Hunting: back to basics, no shortcuts
- NetBIOS Names for Pivoting and Threat Clustering: old-school telemetry, still gold
- War Wagon: Tactical Telemetry Lab: a hands-on telemetry lab
☁️ Identity & Cloud
- Hunting Azure AD Graph and Microsoft Graph API Activity: spotting abuse hiding in plain sight
- Ghost in the MS Shell: hunting first-party app abuse, ROPC, and refresh token attacks
🧬 Malware & Endpoint
- Malware Intelligence with YARA (Part 2): leveling up your rule-writing game
- macOS Architecture-Based Threat Scanner: catching malware too lazy for ARM64
- Breaking Through Defenses: understanding and detecting Windows endpoint security bypasses
🎣 Human, Physical & Deception
- Fixin’ To Click - What’s The Catch?: the psychology behind why we click
- Defense Against the Dark (Web) Arts: monitoring and defending against dark web threats
- Pot of Bronze | Proxmox and Adversaries: honeypots, deception, and watching adversaries walk in
- Writing the Incident Story: professional reporting for malware and cyber attacks
- From Feed to Find: AI-assisted CTI for detection engineering and threat hunting
Community & Networking
DEATHCon Prague is your opportunity to meet Detection Engineers, Threat Hunters, SOC Analysts, Incident Responders, and cybersecurity leaders from around the world. It’s built around collaboration and community. Whether you’re expanding your network or exchanging ideas with peers, you’ll find your people here.
Food & Drinks
Full catering is provided for both days of the event, including coffee, still and sparkling water, and tea throughout. On the second day, join us for dinner together, a great chance to get to know each other better in a relaxed setting.
Event venue & nearby stays
Zenwork Palác ARA, Perlová, Praha 1, Czech Republic
Concerts, fests, parties, meetups — all the happenings, one place.