Build a Headless SOC at Black Hat: Hands-on Workshop

There's a lot of talk about AI in security operations. Most of it is thought leadership from people who haven't run the agents themselves. This workshop is not that. Join LimaCharlie, Black Hills Information Security, and Digital Defense Institute for a day of hands-on building at Black Hat, free, in-person, and no slides. Food and drinks will be provided. Agenda: LimaCharlie CEO Maxime Lamothe-Brassard opens the day with a short technical talk on the headless SOC: why the future of security operations is API-driven, agent-operable infrastructure, not better dashboards or smarter copilots. He’ll demonstrate what it looks like to build operational AI into a SOC from scratch. Live terminal work. No marketing deck. After that, the day belongs to you. Ken Westin and Chris Botelho (LimaCharlie solutions engineers) run hands-on workshops for every skill level. Never used LimaCharlie before? No problem. You can build and deploy your first AI agent in minutes and they will walk you through it. Already experienced? Go straight to the advanced material: AI orchestration, multi-agent hunting pipelines, custom bots, and more. The team has a range of workshops ready and will meet you where you are. Hayden Covington, Eric Capuano, and Whitney Champion will run an open threat hunting lab in the room all afternoon. Real scenarios, real telemetry, no script. Work through detection engineering, adversary analysis, and incident response on infrastructure where every agent is readable and every action is auditable. They teach Advanced Security Operations and Threat Hunting at Black Hat. This is not that course. This is an afternoon of unique, direct access to the same instructors, hands-on, at no cost. Every workshop runs on a headless, API-driven SOC infrastructure where every agent is auditable, every detection is yours, and nothing is locked behind a vendor dashboard. You will leave with your own AI-engineered creations. No pitch. No black box. No chatbot. No wrapper. No BS. Let’s build something real together. Before you arrive: Create your free LimaCharlie account and your CourseStack account. Setup takes less than five minutes and means you can start building the moment you walk in. Bring your laptop - we’ll have a few demo laptops as well (first come first served).Want a head start? Check out the available virtual workshops so you can jump into the advanced material in person. Sponsors: Trainers: