DEF CON 34 Workshop

Posted on 2026-07-13 in article

Join me at DEF CON 34

Where I'll be running a workshop on investigating and responding to business email compromise in M365 environments.

DEF CON workshop blurb

Registration is tomorrow (July 14, 2026) at NOON pacific time.

Workshop resources

All workshop materials will be published here when it starts.

DEF CON workshop repo

Main PowerShell scripts and playbook for BEC incident response are here.

M365 IR script repo

Handy Excel/Calc macros for manual processing and review of CSV logs files are here.

Log processing macro repo

Walk on,

 \`._,'/
 (_- -_)
   \o/

article DEFCON DEFCON34 workshop bec incident response investigation