Securing Black Hat's NOC: Lessons from James Pope of Corelight

Corelight’s James Pope joins Dark Reading’s Joan Goodchild at Black Hat USA to share lessons from more than a decade defending one of cybersecurity’s most unique network environments: the Black Hat Network Operations Center (NOC).

As SOC lead for the Black Hat NOC since 2014, James helps oversee more than 100 analysts, threat hunters, and partners tasked with distinguishing legitimate security research from real attacks across a network built from scratch for the conference.

In this conversation, James discusses how the Black Hat NOC uses network traffic visibility, threat hunting, and AI-assisted triage to investigate activity without relying on endpoint agents or device certificates. He also shares examples of what the team has uncovered on the network and why organizations should validate what their security tools and applications are actually doing once deployed.

Learn more about Corelight: https://corelight.com/

Read the Dark Reading interview: https://www.darkreading.com/cybersecurity-operations/securing-black-hat-s-noc-lessons-from-james-pope-of-corelight