Hands-on Workshop OWASP LA - Feb 10, 2026

TOPIC: Defending the New Perimeter: Identity Threat Detection, Investigation, and Response Hands-on Workshop
Join us for an action-packed hands-on workshop event led by James Rulison, Senior Solutions Engineer, SpyCloud.

ABSTRACT: Today’s attackers don’t need exploits – they need access. Using exposed identity data from malware-infected devices and phishing campaigns, adversaries impersonate legitimate users to bypass controls, exploit trust, and quietly persist.

This session explores identity as a critical, but often overlooked, attack surface.

We’ll show how SpyCloud leverages recaptured darknet data from the criminal underground to detect and disrupt identity-based threats like account takeover, session hijacking, and insider threats.

Learn how defenders can go beyond dark web monitoring with identity-centric investigations that uncover hidden exposures and compromised accounts. Through real-world examples, we’ll expose how fraudulent identities – whether DPRK operatives, malicious insiders, or fraudsters using synthetic personas – slip through traditional onboarding and IAM tools by exploiting identity blind spots.

This talk is for defenders who want to understand how identity threats unfold, and how to close the gap between exposure and response before attackers can act.

*Vendors interested in sponsoring please send an email to sponsorship.la@owasp.org*

CODE OF CONDUCT
We hope you enjoy the event, we care deeply about inclusivity and diversity so that OWASP is a comfortable and welcoming community for everyone. Please reach out to one of our chapter leaders if you have any feedback/concerns or would like to speak to us, we take these matters very seriously. You can find out more about our policies here:
https://owasp.org/www-policy/operational/conferences-events.html#conference-and-event-anti-harassment-policy