John Strand
John Strand has both consulted and taught hundreds of organizations in the areas of security, regulatory compliance, and penetration testing. He is a coveted speaker and much loved SANS teacher. John is a contributor to the industry-shaping Penetration Testing Execution Standard and 20 Critical Controls frameworks.
Session
As AI has become more capable, attackers have begun using agentic AI to automate reconnaissance, identify vulnerabilities, generate exploits, and adapt their attacks at a pace that far exceeds what human operators could accomplish alone. The speed of these attacks is shrinking the time defenders have to detect, investigate, and respond. Traditional defensive approaches that rely on signatures, patch cycles, or manual investigation simply are not keeping pace.