Full Schedule
Adversary Village at RSAC 2026

Room 204, Level 2, Moscone South, San Francisco
24-26 March, 2026



Adversary Village Schedule

Tuesday, March 24

09:30 AM - 03:15 PM | 04:15 - 06:00 PM
All-Day Hands-On Activities
  • Adversary Adventure Game
    Choose-your-own-adventure style interactive cyber war-gaming tabletop game. Play as attacker, defender, or CISO.
    Adversary Village Area, Room 204
    9:30 AM - 3:15 PM
  • Breach the Hospital
    Guided breach simulation on a LEGO-based hospital environment with a full cyber range replica.
    Guided Breach Sim Area, Room 204
    9:30 AM - 3:15 PM
  • Breach the Active Directory
    Hands-on Active Directory lab for adversary simulation and purple teaming exercises.
    Hands-On Lab Area, Room 204
    9:30 AM - 3:15 PM
  • Ransomware Sim
    Hands-on adversary emulation plans for ransomware and threat actors. Volunteer-assisted, all skill levels welcome.
    Adversary Simulator Booth, Room 204
    9:30 AM - 3:15 PM

Len Noe
Len Noe
Technical Evangelist & Cyborg Hacker
Interactive Session
Humanity 2.0 - We are no longer standing at the edge of the future. We are living inside it.
9:30 - 11:00 AM
Adversary Village, Room 204, Moscone South
Ransomware Simulation Exercises
Hands-On Activity
Live ransomware attack simulation walkthrough and defense
11:00 - 11:30 AM
Adversary Simulator Booth
Jonathan Baker
Jonathan Baker
Director, CTID, MITRE
Hands-on Activity
Threat-INFORM Your Defenses
11:30 AM - 12:30 PM
Adversary Village, Room 204, Moscone South
Sarah Hume
Purple Team, SRA
Interactive Session
Running Point: How to Execute and Track Purple Team Exercises
1:30 - 2:30 PM
Adversary Village, Room 204, Moscone South
Len Noe
Len Noe
Technical Evangelist & Cyborg Hacker
Interacative Session
Humanity 2.0: We are no longer standing at the edge of the future. We are living inside it.
2:30 - 3:15 PM
Adversary Village, Room 204, Moscone South
Cybeer Ops
Community Networking Social
Social
3:15 - 4:15 PM
Adversary Village Area
Patrick Gorman
Interactive Session
Exploiting common security gaps in SMBs
4:15 - 5:30 PM
Adversary Village, Room 204, Moscone South
Len Noe
Hands-On Adversary and Ransomware Simulation
Hands-On Activity
Live ransomware simulation walkthrough
5:30 - 6:00 PM
Adversary Village, Room 204, Moscone South

Wednesday, March 25

09:30 AM - 04:30 PM
All-Day Hands-On Activities
  • Adversary Adventure Game
    Choose-your-own-adventure style interactive cyber war-gaming tabletop game. Play as attacker, defender, or CISO.
    Adversary Village Area, Room 204
    9:30 AM - 4:30 PM
  • Breach the Hospital
    Guided breach simulation on a LEGO-based hospital environment with a full cyber range replica.
    Guided Breach Sim Area, Room 204
    9:30 AM - 4:30 PM
  • Breach the Active Directory
    Hands-on Active Directory lab for adversary simulation and purple teaming exercises.
    Hands-On Lab Area, Room 204
    9:30 AM - 4:30 PM

Len Noe
Len Noe
Technical Evangelist & Cyborg Hacker
Interactive Session
Humanity 2.0 - We are no longer standing at the edge of the future. We are living inside it.
08:30 - 09:30 AM
Connection Hub, Moscone West
Sarah Hume
Purple Team, SRA
Interactive Session
Running Point: How to Execute and Track Purple Team Exercises
09:30 - 10:30 AM
Connection Hub, Moscone West
Hands-On Adversary and Ransomware Simulation
Hands-On Activity
Live ransomware simulation walkthrough
9:30 - 10:30 AM
Adversary Village, Room 204, Moscone South
Panel · VLG-W02
Panel
AI and the New Offensive Playbook of State-Sponsored Cyber Threat Actors
9:40 - 10:30 AM
VRSAC Villages Stage, Moscone South
How adversaries use AI for tooling, phishing, automated exploitation, and evasive malware.
Adam PenningtonMITRE ATT&CK
Seeyew MoDEF CON
Paul McCartyResearcher
AbhijithAdversary Village
Table-Top Exercise
Abx
Hands-On
Gamified adversarial scenario exercise
10:30 - 11:30 AM
Adversary Village Area
Sarah Hume
Purple Team, SRA
Interactive Session
Running Point: How to Execute and Track Purple Team Exercises
11:30 AM - 12:30 PM
Adversary Village, Room 204, Moscone South
Joel Correa
Hands-On Activity
Adversary Simulation Exercises
1:30 - 2:30 PM
Adversary Village Area
Jonathan Baker
Jonathan Baker
Director, CTID, MITRE
Hands-on Activity
Threat-INFORM Your Defenses
2:30 - 3:30 PM
Adversary Village, Room 204, Moscone South
Trey Bilbrey
Head of SCYTHE Labs
Hands-On Session
Be The Threat: Threat Emulation Exercises
3:30 - 4:30 PM
Adversary Village, Room 204, Moscone South

Thursday, March 26

09:30 AM - 02:30 PM
All-Day Hands-On Activities
  • Adversary Adventure Game
    Choose-your-own-adventure style interactive cyber war-gaming tabletop game. Play as attacker, defender, or CISO.
    Adversary Village Area, Room 204
    9:30 AM - 2:30 PM
  • Breach the Hospital
    Guided breach simulation on a LEGO-based hospital environment with a full cyber range replica.
    Guided Breach Sim Area, Room 204
    9:30 AM - 2:30 PM
  • Breach the Active Directory
    Hands-on Active Directory lab for adversary simulation and purple teaming exercises.
    Hands-On Lab Area, Room 204
    9:30 AM - 2:30 PM

Jonathan Baker
Offensive Cyber Security Leaders Round-table
Round-table discussion
9:30 - 11:00 AM
Adversary Village, Room 204, Moscone South
Table-Top Exercise
Hands-On
Gamified adversarial scenario exercise
11:00 AM - 12:00 PM
Adversary Village Area
Joel Correa
Hands-On
Scalable Interactive Model of Complexity
12:00 - 2:30 PM
Adversary Village Area
Village Closing
Closing remarks & wrap-up
Closing
2:30 PM
Adversary Village, Room 204, Moscone South

Join Adversary Village Discord Server.

Join Adversary Village official Discord server to connect with our amazing community of adversary simulation experts and offensive security researchers!