BEGIN:VCALENDAR
VERSION:2.0
X-WR-CALNAME:rvasec15
X-WR-CALDESC:Event Calendar
METHOD:PUBLISH
CALSCALE:GREGORIAN
PRODID:-//Sched.com RVAsec 15//EN
X-WR-TIMEZONE:UTC
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T115900Z
DTEND:20260609T210000Z
SUMMARY:Registration
DESCRIPTION:For Day 1\, please line up as volunteers direct the crowd.\n\nRegistration on Day 1 is the most hectic part of the conference! We ask that you please read the instructions carefully and also please bring your patience!\nRegistration starts on Tuesday morning at 8 AM and will be on the main floor near the escalators (see Sched for the map).&nbsp\;This is always a hectic time\, please look for RVAsec volunteers directing traffic and be patient with the process.&nbsp\;The line will form from the registration desk\, then wrap around towards the parking deck.&nbsp\;Please&nbsp\;ensure that you have your EventBrite QR code&nbsp\;(printed or electronic) to make check-in even faster. It will be at the bottom of this email.After you have checked in\, please continue forward then around &nbsp\;toward the escalators downstairs to obtain your t-shirt\, bag\, badge\, info sheets\, and program.This is also where you can turn in your Passport for Prizes.\n\nWiFi sponsored by RVAsec:\n\nNetwork is "RVAsec"\nPassword is "nevermore!"
CATEGORIES:INFORMATIONAL
LOCATION:Upstairs\, Desk\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:82e17401d8801d323fd717f664c591d9
URL:http://rvasec15.sched.com/event/82e17401d8801d323fd717f664c591d9
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T120000Z
DTEND:20260609T130000Z
SUMMARY:Breakfast - Day 1
DESCRIPTION:After you get registered\, come downstairs and enjoy breakfast!\nMake sure you are in the ballroom by 9am for the welcome session.\n\nGo see our vendors in the Expo!\n\nMenu:\nTBDBeverages: Starbucks Regular and Decaf Coffee\, Assorted Pepsi Sodas\, Hot Water with Assorted TAZO Herbal Teas\, available throughout the day. Water stations will be located in all rooms upstairs and downstairs.\n\nSeating: You are welcome to take your breakfast to any area of the hotel except Fall/Line. Banquet tables & chairs can be found on both sides of the Grand Ballroom upstairs. There is also seating downstairs in the Capital Ballroom (Expo). Please note these tables on Day 2 are reserved for the CTF. Various locations downstairs in the foyer are also available.\n\n
CATEGORIES:FOOD
LOCATION:Downstairs\, Foyer\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:8aea60999ea5d626965583d95b8e8183
URL:http://rvasec15.sched.com/event/8aea60999ea5d626965583d95b8e8183
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T130000Z
DTEND:20260609T133000Z
SUMMARY:Welcome - Day 1
DESCRIPTION:Welcome to RVAsec 15!\n\nRemarks will be provided about what to expect at the conference and many thanks to our volunteers and sponsors for making it possible.\n\nWe will also have short presentations on CTF\, Badge\, and Lock Picking.\n\n
CATEGORIES:INFORMATIONAL
LOCATION:Upstairs\, Grand Ballroom D/E/F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:4bb70d47acb60c0c69525e5ca5df43c1
URL:http://rvasec15.sched.com/event/4bb70d47acb60c0c69525e5ca5df43c1
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T133000Z
DTEND:20260609T143000Z
SUMMARY:Sherrod DeGrippo - Keynote
DESCRIPTION:Sherrod DeGrippo serves as the Deputy CISO for Microsoft’s Customer Security Management Office (CSMO)\, where she guides threat intelligence strategy and strengthens customer-focused security initiatives. She was recognized as Cybersecurity Woman of the Year (2022) and Cybersecurity PR Spokesperson of the Year (2021)\, and she hosts the Microsoft Threat Intelligence Podcast\, providing timely insights into the evolving threat landscape.\n\nPreviously\, she served as the Director of Threat Intelligence Strategy at Microsoft\, shaping the organization’s approach to threat analysis and intelligence-driven security outcomes. Prior to that\, she was Vice President of Threat Research and Detection at Proofpoint\, where she led a global organization of threat researchers\, malware reverse engineers\, and intelligence analysts.\n\nWith a 21-year career in cybersecurity\, her experience also includes leading Red Team Services at Nexum\; serving as a senior solutions engineer at Symantec\; senior security consultant at Secureworks\; and senior network security analyst for the National Nuclear Security Administration.\n\nSherrod is widely recognized for her expertise\, with commentary featured across major outlets including BBC News\, The Wall Street Journal\, CNN\, and The New York Times. She is also a frequent presenter at premier industry conferences such as Black Hat\, RSA Conference\, RMISC\, and SleuthCon.
CATEGORIES:KEYNOTE
LOCATION:Upstairs\, Grand Ballroom D/E/F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:e9d71288a2f21dcd5645534427924251
URL:http://rvasec15.sched.com/event/e9d71288a2f21dcd5645534427924251
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T143000Z
DTEND:20260609T150000Z
SUMMARY:Vendor Break & Room Change
DESCRIPTION:Break and room change.\n\nWe need all attendees to leave the ballroom quickly as possible so we can split the room for sessions.\n\nGo see our vendors in the Expo!\n\nMenu:\nTBDBeverages: Starbucks Regular and Decaf Coffee\, Assorted Pepsi Sodas\, Hot Water with Assorted TAZO Herbal Teas\, available throughout the day. Water stations will be located in all rooms upstairs and downstairs.\n\n
CATEGORIES:VENDOR BREAK
LOCATION:Downstairs\, Capital Ballroom\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:2612fafc04a89b646eaba21bbb0a7455
URL:http://rvasec15.sched.com/event/2612fafc04a89b646eaba21bbb0a7455
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T143000Z
DTEND:20260609T203000Z
SUMMARY:HackRVA Badge Training & Repair
DESCRIPTION:Come learn about your badge\, get it fixed if there are any issues and talk to HackRVA!\n\nHackRVA is a member-run and organized non-profit makerspace in Richmond\, Virginia. HackRVA is a space filled with tools\, computers\, and people who like to build\, invent\, tinker\, expand their minds\, and learn and share new skills. You’ll find a diverse group of individuals who are into electronics\, woodworking\, embedded software\, metalworking\, programming\, music\, art\, video\, photography\, 3D printing\, sewing\, textiles\, and virtual reality—and that’s for starters. HackRVA members have access to the makerspace\, tools\, community and learning opportunities through member-lead workshops\, events and projects.
CATEGORIES:VILLAGE
LOCATION:Downstairs\, Foyer\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:dacd454da32c98377da1cfe77e56cb63
URL:http://rvasec15.sched.com/event/dacd454da32c98377da1cfe77e56cb63
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T143000Z
DTEND:20260609T210000Z
SUMMARY:Lock Picking Village and Contest
DESCRIPTION:A variety of example locks\, from simple to extremely hard\, along with a picks of all shapes and sizes will be available in our lock pick village.\n\nStop by and have some fun testing your skills! Provided hand sanitizer will be required to help reduce the modern risks while we explore the oldest security mechanism on earth!\n\nIf you fancy yourself a strong picker or have a competitive streak\, we are planning to have a time contest of a series of locks\, with the fastest through them all taking home something epic.
CATEGORIES:VILLAGE
LOCATION:Downstairs\, Shenandoah\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:d655dc0e2680c12956caa59fe6b7bdf6
URL:http://rvasec15.sched.com/event/d655dc0e2680c12956caa59fe6b7bdf6
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T150000Z
DTEND:20260609T155000Z
SUMMARY:A Peek Behind the Curtain: How A.I. Works
DESCRIPTION:“A Peek Behind the Curtain: How A.I. Works” offers a clear\, non-technical tour of how modern AI systems learn from data and generate predictions or content. The talk demystifies key concepts like training\, inference\, and model limitations so attendees can better understand what AI can—and can’t—do.
CATEGORIES:101
LOCATION:Downstairs\, Madison / Jefferson / Monroe\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:bcb065a41068df20eace41fae4053b96
URL:http://rvasec15.sched.com/event/bcb065a41068df20eace41fae4053b96
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T150000Z
DTEND:20260609T155000Z
SUMMARY:Empathy\, Not Telepathy: How Embedded Engineering Teams Scale Cyber Response
DESCRIPTION:The real issue of AI isn't just the speed of the adversary\, but the unprecedented noise they’ve created which makes finding the signal through traditional means nearly impossible. This talk explores how embedding engineers into the cyber lifecycle helps drown out the noise and empowers analysts to focus on high-leverage response at scale.
CATEGORIES:BUSINESS
LOCATION:Upstairs\, Grand Ballroom D/E\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:04ced54947cd568a40d5217ef7e74bc8
URL:http://rvasec15.sched.com/event/04ced54947cd568a40d5217ef7e74bc8
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T150000Z
DTEND:20260609T155000Z
SUMMARY:Hacking Customized IDE Distributions: Methodology Behind Six Figures in Bug Bounties
DESCRIPTION:Customized IDE distributions pose a lucrative attack surface due to the interconnected systems they interact with\, usually highly privileged. This talk covers high level technical ecosystem architectures\, IDE threat modeling\, common attack vectors\, and takes a stab at defining an IDE exploitation kill chain. While specific bug bounty targets and findings remain undisclosed\, the methodology developed while producing them will be covered.
CATEGORIES:TECHNICAL
LOCATION:Upstairs\, Grand Ballroom F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:ec9803cec8e4905675b7998d544779fd
URL:http://rvasec15.sched.com/event/ec9803cec8e4905675b7998d544779fd
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T155000Z
DTEND:20260609T170000Z
SUMMARY:Lunch
DESCRIPTION:TBD\n\n\nBeverages: Starbucks Regular and Decaf Coffee\, Assorted Pepsi Sodas\, Hot Water with Assorted TAZO Herbal Teas\, available throughout the day. Water stations will be located in all rooms upstairs and downstairs.\n\nSeating:&nbsp\;You are welcome to take your lunch to any area of the hotel. Banquet tables & chairs can be found on both sides of the Grand Ballroom upstairs. There is also seating downstairs in the Capital Ballroom (Expo). Please note these tables on Day 2 are reserved for the CTF. Various locations downstairs in the Foyer are also available.
CATEGORIES:FOOD
LOCATION:Downstairs\, Foyer\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:1869d2de47301ca786e87982234b7ec4
URL:http://rvasec15.sched.com/event/1869d2de47301ca786e87982234b7ec4
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T170000Z
DTEND:20260609T175000Z
SUMMARY:Building Custom Detections with Zeek and Spicy
DESCRIPTION:Discover how to use Zeek in order to create custom detections for network threats. We will go over how to create a real detection using Zeek via scripting\, protocol analysis\, and log analysis.\nZeek is a network monitoring tool that analyzes network traffic with custom analyzers and produces logs. This talk will go over a real threat from beginning to end. This talk will walk through a Redis RCE exploit (eg https://medium.com/@knownsec404team/rce-exploits-of-redis-based-on-master-slave-replication-ef7a664ce1d0) based on master-slave replication and how Zeek can be used to detect it. This will also go over Spicy\, a protocol parser generator\, and how it helps to detect cases like this.\n
CATEGORIES:101
LOCATION:Downstairs\, Madison / Jefferson / Monroe\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:a5052d5ab125f5189bee6d124784a236
URL:http://rvasec15.sched.com/event/a5052d5ab125f5189bee6d124784a236
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T170000Z
DTEND:20260609T175000Z
SUMMARY:Secure by Design\, Trusted Through Compliance
DESCRIPTION:This talk will challenge listeners to redefine the traditional technical vs compliance mindset and thing of security as risk management. &nbsp\;Whether it's technical or contractual risk we should all be focused on the same goal of reducing material impacts to our organizations. &nbsp\;It will walk through a model in which compliance is built upon strong technical foundations and becomes a mechanism for communicating trust to your organization\, customers\, and regulators
CATEGORIES:BUSINESS
LOCATION:Upstairs\, Grand Ballroom D/E\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:f815c815d3305f8ebd87de959633cb01
URL:http://rvasec15.sched.com/event/f815c815d3305f8ebd87de959633cb01
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T170000Z
DTEND:20260609T200000Z
SUMMARY:CTF Prep
DESCRIPTION:Come prep and learn more about the CTF contest!
CATEGORIES:CTF
LOCATION:Downstairs\, Capital Ballroom / Middle\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:d9bd45e017322b6d1a312809738befad
URL:http://rvasec15.sched.com/event/d9bd45e017322b6d1a312809738befad
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T170000Z
DTEND:20260609T175000Z
SUMMARY:I Called Your AI Agent and It Told Me Everything: Live Voice AI Red Teaming
DESCRIPTION:You'll leave this talk understanding:How voice AI agents are architecturally different from text chatbotsThe specific attack vectors unique to voice: transcription manipulation\, DTMF injection\, audio-layer prompt injection\, and social engineering through vocal toneA repeatable methodology for testing voice AI systems in your own organizationConcrete remediation strategies for the most common findings
CATEGORIES:TECHNICAL
LOCATION:Upstairs\, Grand Ballroom F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:d1b66947b5d4212fd74df28ddf7cc9a2
URL:http://rvasec15.sched.com/event/d1b66947b5d4212fd74df28ddf7cc9a2
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T175000Z
DTEND:20260609T180000Z
SUMMARY:Vendor Break
DESCRIPTION:Go see our vendors in the Expo!\n\nBeverages: Starbucks Regular and Decaf Coffee\, Assorted Pepsi Sodas\, Hot Water with Assorted TAZO Herbal Teas\, available throughout the day. Water stations will be located in all rooms upstairs and downstairs.\n\n\n
CATEGORIES:VENDOR BREAK
LOCATION:Downstairs\, Capital Ballroom\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:30a6d0e49620ae4ba82e2c79cbb0bc28
URL:http://rvasec15.sched.com/event/30a6d0e49620ae4ba82e2c79cbb0bc28
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T180000Z
DTEND:20260609T185000Z
SUMMARY:Troubleshooting: Where Information Meets WTF
DESCRIPTION:As an Offensive Security Consultant\, I often joke that my job is 90% troubleshooting and 10% breaking things. Truthfully\, developing the skill and methodology for finding the right information\, tools\, or techniques and implementing them when things get borked is at the heart of hacking. Similarly\, that same skill if applied to our attitude\, health\, relationships\, and career can make the difference between a steady pace and quickly flaming out in life.This talk is aimed at folks who are currently employed in Cybersecurity\, those looking to transition in\, and those who are ready to transition out - basically anyone! We'll talk about what troubleshooting is\, and how developing an effective strategy in troubleshooting technical things can apply to the non-technical aspects of life with some real-world examples\, audience participation\, and some practical tips to ground this concept into everyday life.
CATEGORIES:101
LOCATION:Downstairs\, Madison / Jefferson / Monroe\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:1de92912374a3e8f1a6e86d9c5f1c118
URL:http://rvasec15.sched.com/event/1de92912374a3e8f1a6e86d9c5f1c118
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T180000Z
DTEND:20260609T185000Z
SUMMARY:No Breach Required: $52 Million in Cybersecurity Fraud Settlements Built on Paperwork\, Not Incidents
DESCRIPTION:We present original research quantifying the gap between what federal contractors certify about their security posture and what vulnerability telemetry actually shows\, combining data science with False Claims Act enforcement analysis to estimate the real FCA exposure across the defense industrial base. We then ask whether the industry's own risk-scoring tools\, built to make triage rational\, are inadvertently building the evidentiary record that makes fraud prosecution easier.
CATEGORIES:BUSINESS
LOCATION:Upstairs\, Grand Ballroom D/E\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:205d5625829d3d0bc862e88b82658522
URL:http://rvasec15.sched.com/event/205d5625829d3d0bc862e88b82658522
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T180000Z
DTEND:20260609T185000Z
SUMMARY:Social Engineering The Machine: When Your Target Runs On Attention Instead Of Anxiety
DESCRIPTION:Every AI talk this year will tell you prompt injection is a problem. This one gives you the methodology to actually exploit it. Borrowing from decades of adversarial human testing\, we’ll move past "vibes" and "jailbreak screenshots" to build a working\, repeatable framework for social engineering the machine.
CATEGORIES:TECHNICAL
LOCATION:Upstairs\, Grand Ballroom F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:c0fb5acefbc45a01c806a11fb41016c5
URL:http://rvasec15.sched.com/event/c0fb5acefbc45a01c806a11fb41016c5
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T185000Z
DTEND:20260609T190000Z
SUMMARY:Vendor Break
DESCRIPTION:Go see our vendors in the Expo!\n\nMenu:\nWarm Chocolate Chip Cookies&nbsp\;Cold Chocolate Milk and 2% Milk\nBeverages: Starbucks Regular and Decaf Coffee\, Assorted Pepsi Sodas\, Hot Water with Assorted TAZO Herbal Teas\, available throughout the day. Water stations will be located in all rooms upstairs and downstairs.\n\n\n\n
CATEGORIES:VENDOR BREAK
LOCATION:Downstairs\, Capital Ballroom\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:2c408c6df86590d3bf6501d198cc100e
URL:http://rvasec15.sched.com/event/2c408c6df86590d3bf6501d198cc100e
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T190000Z
DTEND:20260609T195000Z
SUMMARY:Beyond the Tip of the Iceberg: Undercover HUMINT Operations Inside the Ransomware Ecosystem
DESCRIPTION:Ransomware attacks are the visible event. The access economy enabling them is not. This session maps that economy — how access is acquired\, automated\, and converted into ransomware deployment — using intelligence from years of undercover operations inside the criminal underground. Attendees will leave with a working model of how initial access brokers operate\, and a concrete illustration of how fast CVE exploitation moves from public disclosure to active resale: in February 2026\, operatives observed IABs selling confirmed access attributed to a critical BeyondTrust vulnerability within 17 days of vendor advisory. The session closes with a case study of an ALPHV affiliate whose documented operational mistakes contributed to a DOJ prosecution — and a framework for how the private-sector-to-law-enforcement intelligence loop works when it functions correctly.
CATEGORIES:101
LOCATION:Downstairs\, Madison / Jefferson / Monroe\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:685b67d8eaa6d5614aa039bbfca0b2d6
URL:http://rvasec15.sched.com/event/685b67d8eaa6d5614aa039bbfca0b2d6
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T190000Z
DTEND:20260609T195000Z
SUMMARY:Gigawatts and Governance: The Data Security Crisis No One Is Talking About
DESCRIPTION:Gigawatts of power. Trillions in investment. A data security crisis hiding in plain sight. The explosive growth of AI data centers has created an infrastructure layer most security frameworks were never designed to govern. When ownership of that infrastructure determines who truly controls the data inside it\, conventional perimeter thinking is not enough. This session makes the case that infrastructure governance is the defining data security challenge of our generation.
CATEGORIES:BUSINESS
LOCATION:Upstairs\, Grand Ballroom D/E\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:9d6398dfca0d85c7c0ccd99401b79121
URL:http://rvasec15.sched.com/event/9d6398dfca0d85c7c0ccd99401b79121
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T190000Z
DTEND:20260609T195000Z
SUMMARY:Robots vs Robots – Securing AI and the Data that Powers It
DESCRIPTION:As AI systems\, copilots\, and autonomous workflows proliferate\, defenders must secure not only the data that fuels them\, but the AI behaviors\, access paths\, and automation they introduce. Robots vs. Robots explores how organizations can protect AI systems end‑to‑end by controlling data exposure\, governing AI access\, and using automation to stay ahead of adversaries.
CATEGORIES:TECHNICAL
LOCATION:Upstairs\, Grand Ballroom F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:eea520f541e1be2e5b11ed8089575976
URL:http://rvasec15.sched.com/event/eea520f541e1be2e5b11ed8089575976
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T195000Z
DTEND:20260609T200000Z
SUMMARY:Vendor Break
DESCRIPTION:Go see our vendors in the Expo!\n\nBeverages: Starbucks Regular and Decaf Coffee\, Assorted Pepsi Sodas\, Hot Water with Assorted TAZO Herbal Teas\, available throughout the day. Water stations will be located in all rooms upstairs and downstairs.\n\n
CATEGORIES:VENDOR BREAK
LOCATION:Downstairs\, Capital Ballroom\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:969f6ea061c2e1b55d783f13b871b472
URL:http://rvasec15.sched.com/event/969f6ea061c2e1b55d783f13b871b472
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T200000Z
DTEND:20260609T205000Z
SUMMARY:Community is a Control: Strengthening Cybersecurity Through Connection
DESCRIPTION:In cybersecurity\, we spend a lot of time talking about new CVEs\, what tools could fill this gap\, how can we automate this\, and how we can use AI here. We debate coverage\, stack optimization\, and detection engineering. At the same time\, many teams are operating under negative budgets\, understaffing\, and constant pressure to do more with less.What we don’t talk about enough is the role people play in all of this.
CATEGORIES:101
LOCATION:Downstairs\, Madison / Jefferson / Monroe\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:5e01387187c1a8b60fe226fa2a1780ae
URL:http://rvasec15.sched.com/event/5e01387187c1a8b60fe226fa2a1780ae
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T200000Z
DTEND:20260609T205000Z
SUMMARY:Breaking Tokens: Modern Attacks on OAuth\, OIDC\, and JWT Auth Flows
DESCRIPTION:As applications embrace OAuth\, OIDC\, and JWTs for federated authentication\, attackers are shifting focus to token abuse and logic flaws rather than password theft.This talk explores how modern auth systems can be compromised through token replay\, session fixation\, and insecure implementation of identity protocols.We’ll walk through real-world examples — including intercepted tokens\, replayed sessions\, and privilege escalations through misconfigured scopes and claims.We’ll also demonstrate a purpose-built lab environment and open-source tooling to analyze and detect these flaws\, helping teams validate their own auth integrations.Finally\, we’ll discuss secure patterns for token handling\, revocation\, and identity proofing that can prevent these modern attacks before they reach production.
CATEGORIES:TECHNICAL
LOCATION:Upstairs\, Grand Ballroom F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:db74e9b0db94637e5174800d9f5df82e
URL:http://rvasec15.sched.com/event/db74e9b0db94637e5174800d9f5df82e
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T205000Z
DTEND:20260609T210000Z
SUMMARY:Day 1 - Closing
DESCRIPTION:Remarks will be provided on Day 1\, and what to expect for the rest of the evening and Day 2.
CATEGORIES:INFORMATIONAL
LOCATION:500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:826286c9413a9d3bec1227acb0fb1658
URL:http://rvasec15.sched.com/event/826286c9413a9d3bec1227acb0fb1658
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T210000Z
DTEND:20260609T213000Z
SUMMARY:Vendor Break & Room Change
DESCRIPTION:Grab a drink and go see the vendors one more time in the Expo downstairs before the after party starts!\nBars open in Foyer while you wait for the After Party to be ready!Food service will begin at 5:30pm inside the Ballroom\; bars move inside as well.&nbsp\;Menu\nTBDBar\nPremium Wines:&nbsp\;Trinity Oaks - Cabernet Sauvignon\, Pinot Noir\, Pinot Grigio\, ChardonnayDomestic Beer:&nbsp\;Yuengling\, Michelob UltraImport Beer & Seasonal Crafts:&nbsp\;Corona\, Stella\, Blue Moon\, Local IPA\, Local CiderPremium Liquor: Titos Vodka\, Citadelle Gin\, Cruzan Rum\, Jose Cuervo Tequila\, Jim Beam Bourbon\, Dewar's White Label Scotch\, Jack Daniels WhiskeyAssorted Pepsi Products\, Water and Non-Alcoholic Juices/Punch\n
CATEGORIES:VENDOR BREAK
LOCATION:Downstairs\, Capital Ballroom\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:8ade6f3635a117c0110d308b47da3f1c
URL:http://rvasec15.sched.com/event/8ade6f3635a117c0110d308b47da3f1c
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260609T213000Z
DTEND:20260610T010000Z
SUMMARY:RVAsec After Party
DESCRIPTION:TBD\n\nMenuTBD\n\nBar\nTBD\n
CATEGORIES:SOCIAL
LOCATION:Upstairs\, Grand Ballroom D/E/F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:7ba2beeb009506088d18c3ed28426b77
URL:http://rvasec15.sched.com/event/7ba2beeb009506088d18c3ed28426b77
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T115900Z
DTEND:20260610T210000Z
SUMMARY:Registration
DESCRIPTION:If you were not able to attend Day 1\, please proceed upstairs to register.\nIf you were able to register no need to go back to registration.\n\nIf you have any questions or issues please stop by for help.\n\nThis is also where you can turn in your Passport for Prizes.\n\nWiFi sponsored by RVAsec:\nNetwork is "RVAsec"\nPassword is "nevermore!"
CATEGORIES:INFORMATIONAL
LOCATION:Upstairs\, Desk\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:0a03e395ba7db554e898e237377be6b0
URL:http://rvasec15.sched.com/event/0a03e395ba7db554e898e237377be6b0
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T120000Z
DTEND:20260610T125000Z
SUMMARY:Breakfast - Day 2
DESCRIPTION:Come downstairs and enjoy breakfast before the Day 2 welcome session!\n\nReminder the session starts earlier on day 2\, be in your seats by 8:50am!\n\nMenu:\nTBD
CATEGORIES:FOOD
LOCATION:Downstairs\, Foyer\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:be342fa5ea7dea00ace8eb28ad119537
URL:http://rvasec15.sched.com/event/be342fa5ea7dea00ace8eb28ad119537
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T125000Z
DTEND:20260610T130000Z
SUMMARY:Welcome - Day 2
DESCRIPTION:Welcome to Day 2 RVAsec 15!\n\nRemarks will be provided about what to expect at the conference and many thanks to our volunteers and sponsors for making it possible.
CATEGORIES:INFORMATIONAL
LOCATION:Upstairs\, Grand Ballroom D/E/F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:3b48cb8283bf981c92bbcfba2035b8ba
URL:http://rvasec15.sched.com/event/3b48cb8283bf981c92bbcfba2035b8ba
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T130000Z
DTEND:20260610T140000Z
SUMMARY:Dave Lewis - Keynote
DESCRIPTION:Dave has 30+ years of industry experience. He has extensive experience in IT security operations and management. Dave is the Global Advisory CISO for 1Password. He is the founder of the security site Liquidmatrix Security Digest & podcast. Dave also hosts the Chasing Entropy Podcast. He was a member of the board of directors for BSides Las Vegas for 8 years. He currently serves on the advisory boards of Byos.io and Knostic.ai.\n\nDave has previously worked in critical infrastructure for 9 years as well as for companies such as Duo Security\, Akamai\, Cisco\, AMD and IBM. Previously he served on the board of directors for (ISC)2 as well as being a founder of the BSides Toronto conference.\n\nFor fun he is a curator of small mammals (his kids) plays bass guitar\, grills\, is part owner of a whisky distillery and a soccer team.
CATEGORIES:KEYNOTE
LOCATION:Upstairs\, Grand Ballroom D/E/F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:993d58f9c3733ac7c7529f7ab4cb4224
URL:http://rvasec15.sched.com/event/993d58f9c3733ac7c7529f7ab4cb4224
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T140000Z
DTEND:20260610T190000Z
SUMMARY:CTF Competition
DESCRIPTION:As many of you know\, we pride ourselves with this CTF being an all-inclusive learning CTF and not just a ‘stump the chump / who’s the best engineer in the room’ kind of CTF. That said\, we need volunteers to come up with fresh ideas\, challenges\, and setups that are both fun and informative. Additionally\, we do want to provide a challenge for those who show up looking for one\, so if you are a more advanced user or admin and have some killer challenges that can stump someone\, we’ll need those too for the higher tiers.\n\nYou’ll need a laptop to participate. Teams can have up to 4 people\, or you may compete as an individual.\nFor those who like to come prepared\, we suggest that you have a VM or two ready. You can download Kali Linux here (https://www.kali.org/downloads/) or get a free Windows VM here (https://developer.microsoft.com/en-us/windows/downloads/virtual-machines/). Some tools that might be helpful include CyberChef\, BurpSuite\, Ghidra\, Pwntools\, and Wireshark.\n\nThe MetaCTF team has been involved with the RVAsec CTF since 2016.\n\nThanks to RVAsec for sponsoring!
CATEGORIES:CTF
LOCATION:Downstairs\, Capital Ballroom / Middle\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:461cee8ec93b8ca0a3b45fc0c62a17fd
URL:http://rvasec15.sched.com/event/461cee8ec93b8ca0a3b45fc0c62a17fd
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T140000Z
DTEND:20260610T143000Z
SUMMARY:Vendor Break
DESCRIPTION:Go see our vendors in the Expo!\n\nMenu:\nTBS\nBeverages: Starbucks Regular and Decaf Coffee\, Assorted Pepsi Sodas\, Hot Water with Assorted TAZO Herbal Teas\, available throughout the day. Water stations will be located in all rooms upstairs and downstairs.
CATEGORIES:VENDOR BREAK
LOCATION:Downstairs\, Capital Ballroom\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:8c15e2b0d88b0714a74250228c5ffc2c
URL:http://rvasec15.sched.com/event/8c15e2b0d88b0714a74250228c5ffc2c
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T140000Z
DTEND:20260610T200000Z
SUMMARY:HackRVA Badge Training & Repair
DESCRIPTION:Come learn about your badge\, get it fixed if there are any issues and talk to HackRVA!\n\nHackRVA is a member-run and organized non-profit makerspace in Richmond\, Virginia. HackRVA is a space filled with tools\, computers\, and people who like to build\, invent\, tinker\, expand their minds\, and learn and share new skills. You’ll find a diverse group of individuals who are into electronics\, woodworking\, embedded software\, metalworking\, programming\, music\, art\, video\, photography\, 3D printing\, sewing\, textiles\, and virtual reality—and that’s for starters. HackRVA members have access to the makerspace\, tools\, community and learning opportunities through member-lead workshops\, events and projects.
CATEGORIES:VILLAGE
LOCATION:Downstairs\, Foyer\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:5f85099f6f2a96159583ba07f5740379
URL:http://rvasec15.sched.com/event/5f85099f6f2a96159583ba07f5740379
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T140000Z
DTEND:20260610T200000Z
SUMMARY:Lock Picking Village and Contest
DESCRIPTION:A variety of example locks\, from simple to extremely hard\, along with a picks of all shapes and sizes will be available in our lock pick village.\n\nStop by and have some fun testing your skills! Provided hand sanitizer will be required to help reduce the modern risks while we explore the oldest security mechanism on earth!\n\nIf you fancy yourself a strong picker or have a competitive streak\, we are planning to have a time contest of a series of locks\, with the fastest through them all taking home something epic.
CATEGORIES:VILLAGE
LOCATION:Downstairs\, Shenandoah\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:df0ac12dd02a897d444fd2f3b8ec2c0d
URL:http://rvasec15.sched.com/event/df0ac12dd02a897d444fd2f3b8ec2c0d
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T143000Z
DTEND:20260610T152000Z
SUMMARY:The Interview Engine: A Career Readiness Framework
DESCRIPTION:Cybersecurity is about mitigating risk at acceptable cost\, and hiring works the same way. This talk pulls back the curtain on how recruiting actually works\, then gives security professionals an engineering-minded framework for staying career-ready without waiting for the layoff to start thinking about it.
CATEGORIES:101
LOCATION:Downstairs\, Madison / Jefferson / Monroe\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:3de493dc46d4eb4d2ebedd4e258e862b
URL:http://rvasec15.sched.com/event/3de493dc46d4eb4d2ebedd4e258e862b
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T143000Z
DTEND:20260610T152000Z
SUMMARY:Breaking Your Silence: How to Build Influence Without Becoming a "Suit"
DESCRIPTION:In security\, we’re taught to let our work speak for itself. But in the real world\, "silent" expertise usually gets ignored\, underfunded\, or misunderstood. Whether it’s imposter syndrome whispering that your latest exploit wasn't "elite" enough or the hesitation to share a tool you built\, these internal blockers limit your impact. This session is about moving past the "quiet professional" trap and building a reputation that matches your technical depth without losing your soul to corporate
CATEGORIES:BUSINESS
LOCATION:Upstairs\, Grand Ballroom D/E\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:5b0cb80f383d039c0f865468ec6f9ea8
URL:http://rvasec15.sched.com/event/5b0cb80f383d039c0f865468ec6f9ea8
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T143000Z
DTEND:20260610T152000Z
SUMMARY:From OSINT to Detection: Building an Agentic CTI Pipeline
DESCRIPTION:Modern threat intelligence moves fast\, but detection engineering lags. This talk presents an agentic workflow that transforms OSINT into actionable detections using structured extraction\, LLM reasoning\, and automated validation. Transparent\, auditable pipelines accelerate the CTI lifecycle\, from ingestion to Sigma rules\, while preserving analyst control\, reducing time-to-detection from days to hours.
CATEGORIES:TECHNICAL
LOCATION:Upstairs\, Grand Ballroom F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:3c5c699c5ae8febcd6f5c703dd7f0783
URL:http://rvasec15.sched.com/event/3c5c699c5ae8febcd6f5c703dd7f0783
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T152000Z
DTEND:20260610T153000Z
SUMMARY:Vendor Break
DESCRIPTION:Go see our vendors in the Expo!\n\nBeverages: Starbucks Regular and Decaf Coffee\, Assorted Pepsi Sodas\, Hot Water with Assorted TAZO Herbal Teas\, available throughout the day. Water stations will be located in all rooms upstairs and downstairs.
CATEGORIES:VENDOR BREAK
LOCATION:Downstairs\, Capital Ballroom\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:3752860a8245be89c8f3846178558552
URL:http://rvasec15.sched.com/event/3752860a8245be89c8f3846178558552
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T153000Z
DTEND:20260610T162000Z
SUMMARY:The State of Information Security Today
DESCRIPTION:The speaker has been in the Information (cyber) security since the late 1900s and will take a look back at the challenges we faced in the beginning and how these challenges have changed and evolved over the past several decades. You think we're doing okay? Let me change your mind.
CATEGORIES:101
LOCATION:Downstairs\, Madison / Jefferson / Monroe\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:4616a2dcf97a99f38d3f30cb62581299
URL:http://rvasec15.sched.com/event/4616a2dcf97a99f38d3f30cb62581299
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T153000Z
DTEND:20260610T162000Z
SUMMARY:Alert Fatigue Is a Misdiagnosis
DESCRIPTION:"Alert fatigue" is a misdiagnosis of a deeper problem: the cognitive decay of the human defender. This talk brings the receipts on how a high-consumption information diet hijacks the prefrontal cortex — and why the answer isn't more automation\, but rebuilding the creative muscle that makes humans worth keeping in the loop.
CATEGORIES:BUSINESS
LOCATION:Upstairs\, Grand Ballroom D/E\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:30691191436ea1378a196b52eef4e10b
URL:http://rvasec15.sched.com/event/30691191436ea1378a196b52eef4e10b
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T153000Z
DTEND:20260610T162000Z
SUMMARY:Flirting With AI: Pwning Web Sites Through Their AI Chatbot Agents
DESCRIPTION:Everyone is implementing AI chatbots to improve their customer experience and journey\, without increasing call centre costs. But this comes with risk: get the configuration wrong and that chatbot can be convinced to part with data that it shouldn't. We think of conventional cyber security controls as being binary\, yet AI can sometimes hallucinate\, lie and mislead. It's a brave organization that would trust their perimeter security exclusively to AI. We'll include some live demos to illustrate the problem.
CATEGORIES:TECHNICAL
LOCATION:Upstairs\, Grand Ballroom F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:5e6c7757ac7c01d77ce557ec57d185a6
URL:http://rvasec15.sched.com/event/5e6c7757ac7c01d77ce557ec57d185a6
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T162000Z
DTEND:20260610T170000Z
SUMMARY:Lunch
DESCRIPTION:TBD\n\n\n** Reminder this is a shorter lunch\, talks start back up at 1pm **\n\nBeverages: Starbucks Regular and Decaf Coffee\, Assorted Pepsi Sodas\, Hot Water with Assorted TAZO Herbal Teas\, available throughout the day. Water stations will be located in all rooms upstairs and downstairs.\n\nSeating:&nbsp\;You are welcome to take your lunch to any area of the hotel. Banquet tables & chairs can be found on both sides of the Grand Ballroom upstairs. There is also seating downstairs in the Capital Ballroom (Expo). Please note these tables on Day 2 are reserved for the CTF. Various locations downstairs in the Foyer are also available.
CATEGORIES:FOOD
LOCATION:Downstairs\, Foyer\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:d401ea79ce8809528ca76da33c816548
URL:http://rvasec15.sched.com/event/d401ea79ce8809528ca76da33c816548
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T170000Z
DTEND:20260610T175000Z
SUMMARY:Unlocking Awareness: How an Escape Experience made Security Fun\, Engaging\, and Approachable
DESCRIPTION:How do you turn security awareness from a check‑the‑box activity into a hands‑on\, memorable experience for everyone? In this session\, we’ll unpack a portable “escape room in a box” designed by our Information Security team to make learning approachable\, collaborative\, and fun.
CATEGORIES:101
LOCATION:Downstairs\, Madison / Jefferson / Monroe\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:19183049ab70c7260cca7dfee4b93ebc
URL:http://rvasec15.sched.com/event/19183049ab70c7260cca7dfee4b93ebc
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T170000Z
DTEND:20260610T175000Z
SUMMARY:Everything Everywhere All At Once: Untangling Security & Privacy Risks Across Today’s AI Tools
DESCRIPTION:AI adoption is exploding—but the security promises behind these tools often don’t match the fine print buried in their terms\, models\, or data flows. This talk cuts through the hype with a no‑B.S. look at the real privacy and security risks across today’s major AI platforms\, and gives business leaders and security professionals a clear roadmap for deciding what’s safe\, what’s risky\, and what’s simply not ready for prime time.
CATEGORIES:BUSINESS
LOCATION:Upstairs\, Grand Ballroom D/E\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:3434d2cdec27f60138d94b311a4127d1
URL:http://rvasec15.sched.com/event/3434d2cdec27f60138d94b311a4127d1
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T170000Z
DTEND:20260610T175000Z
SUMMARY:Initial Access in 2026 – The Power of the Spoken Word
DESCRIPTION:Defensive detections and protocols have come a long way. The adoption of MFA was once the sign of a security minded client with a mature security posture but has reached the level of commonplace. Gaining initial access via email or web application has become so difficult that its often skipped entirely as companies opt to place the attacker on the inside of the network as the starting point. Yet\, business compromises are on the rise. What are attackers using if they no longer rely on business email compromise as their go-to initial access vector. Well\, as was the case with MGM\, they’re often just picking up the phone.
CATEGORIES:TECHNICAL
LOCATION:Upstairs\, Grand Ballroom F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:d42468b1afac010ca991bb92344f8139
URL:http://rvasec15.sched.com/event/d42468b1afac010ca991bb92344f8139
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T175000Z
DTEND:20260610T180000Z
SUMMARY:Vendor Break
DESCRIPTION:Go see our vendors in the Expo!\n\nMenu:\nTBD\nBeverages: Starbucks Regular and Decaf Coffee\, Assorted Pepsi Sodas\, Hot Water with Assorted TAZO Herbal Teas\, available throughout the day. Water stations will be located in all rooms upstairs and downstairs.
CATEGORIES:VENDOR BREAK
LOCATION:Downstairs\, Capital Ballroom\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:0c7b672e172735fad74a8a9e44fc6f0c
URL:http://rvasec15.sched.com/event/0c7b672e172735fad74a8a9e44fc6f0c
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T180000Z
DTEND:20260610T185000Z
SUMMARY:AI SOC and Securing your Environment
DESCRIPTION:This discussion is designed to help teams figure out where AI fits in their environment from an analysis perspective\, it is vendor agnostic and includes agentic deployments\, as well as AI SOC services\, novel attack vectors from independent research\, and the overarching philosophy of how the threat landscape has just massively changed and how to adapt to it.
CATEGORIES:101
LOCATION:Downstairs\, Madison / Jefferson / Monroe\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:ec8390e730aecdabc45ea22eff973a2d
URL:http://rvasec15.sched.com/event/ec8390e730aecdabc45ea22eff973a2d
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T180000Z
DTEND:20260610T185000Z
SUMMARY:Swatting Flies With Sledgehammers: Broken TPRM Programs and How To Fix Them
DESCRIPTION:Third-party and supply chain risk is more important now than ever—but TPRM is also more broken and ineffective than ever. This session will review today’s common approaches to TPRM\, how we got here\, and how we can achieve better outcomes and reasonable assurance with less work. We’ll also explore what that shift could mean for our security programs—and for the industry as a whole. We need a hard reboot\, and it has to start with each of us.
CATEGORIES:BUSINESS
LOCATION:Upstairs\, Grand Ballroom D/E\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:3f3d167049bc927a8f60e397b1f63a5c
URL:http://rvasec15.sched.com/event/3f3d167049bc927a8f60e397b1f63a5c
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T180000Z
DTEND:20260610T185000Z
SUMMARY:Catching Collection in M365: Outlook and SharePoint Canary Tokens
DESCRIPTION:After a stolen token grants access to M365\, the next move is predictable: search for value before exfiltration. This talk shows how to detect that collection phase using canary tokens built on native telemetry across Outlook and SharePoint/OneDrive. We cover end-to-end implementation and results from live production deployments\, including what produced high-fidelity signal and what created noise.
CATEGORIES:TECHNICAL
LOCATION:Upstairs\, Grand Ballroom F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:a79c1ced8bd066a1571229abf4f72e14
URL:http://rvasec15.sched.com/event/a79c1ced8bd066a1571229abf4f72e14
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T185000Z
DTEND:20260610T191000Z
SUMMARY:Vendor Break & Room Change
DESCRIPTION:Room change!\n\nWe need all attendees to leave both sides of the ballroom quickly as possible so we can open the room for the final session and reception..\n\nGo see our vendors in the Expo!\n\nBeverages: Starbucks Regular and Decaf Coffee\, Assorted Pepsi Sodas\, Hot Water with Assorted TAZO Herbal Teas\, available throughout the day. Water stations will be located in all rooms upstairs and downstairs.
CATEGORIES:VENDOR BREAK
LOCATION:Downstairs\, Capital Ballroom\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:0d60c636c0cd99f26f403000dd787b35
URL:http://rvasec15.sched.com/event/0d60c636c0cd99f26f403000dd787b35
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T191000Z
DTEND:20260610T200000Z
SUMMARY:Use It Monday: A 5-Step Method for Turning Security Findings Into Stories Executives Act On
DESCRIPTION:Security teams produce thorough\, accurate reports that executives nod at and never act on. This talk teaches a practical 5-step method for translating findings into narratives that produce decisions — one you'll practice live and use Monday morning.\n\n
CATEGORIES:BUSINESS
LOCATION:Upstairs\, Grand Ballroom D/E/F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:259b0588213256969f7e42622f09e33c
URL:http://rvasec15.sched.com/event/259b0588213256969f7e42622f09e33c
END:VEVENT
BEGIN:VEVENT
DTSTAMP:20260511T122628Z
DTSTART:20260610T200000Z
DTEND:20260610T213000Z
SUMMARY:Closing Reception & Awards
DESCRIPTION:The closing will take place right after the final talk. &nbsp\;We will have a short break for attendees to get their beverages & Hors d'oeuvres\, and then we will do Passport and Lockpick Prizes and CTF awards.\n\nPlease note: \nFood and drink will not be served until the final talk is completed\, so go watch the talk!\n\nMenu:\nTBD\nBar:\nPremium Wines:&nbsp\;Trinity Oaks - Cabernet Sauvignon\, Pinot Noir\, Pinot Grigio\, ChardonnayDomestic Beer:&nbsp\;Yuengling\, Michelob UltraImport Beer & Seasonal Crafts:&nbsp\;Corona\, Stella\, Blue Moon\, Local IPA\, Local CiderPremium Liquor:&nbsp\;Titos Vodka\, Citadelle Gin\, Cruzan Rum\, Jose Cuervo Tequila\, Jim Beam Bourbon\, Dewar's White Label Scotch\, Jack Daniels WhiskeyAssorted Pepsi Products\, Water and Non-Alcoholic Juices/Punch\n
CATEGORIES:SOCIAL
LOCATION:Upstairs\, Grand Ballroom D/E/F/G\, 500 East Broad Street\, Richmond\, Virginia\, USA\, 23219
SEQUENCE:0
UID:5146c94bc0ce55422c7c3585bc06ea24
URL:http://rvasec15.sched.com/event/5146c94bc0ce55422c7c3585bc06ea24
END:VEVENT
END:VCALENDAR