Five live, CTF-style workshops. One mission: outsmart the threat before it outsmarts you.
Go head-to-head with fellow channel partners in a fast-paced Capture-The-Flag competition built around real SentinelOne solutions and real attacker tradecraft. Race the clock, race your peers, and walk away with sharper skills, deeper product mastery, and 3 CPE credits per session toward your continued development.
What Is ThreatOps?
ThreatOps is SentinelOne's Partner Enablement CTF series, five virtual workshops, each dedicated to a different corner of the Singularity Platform: Endpoint, Purple AI, AI SIEM, Cloud Native Security, and Prompt Security.
Every session drops you into freeform challenges modelled on real attack scenarios: live malware, misconfigured cloud infrastructure, leaked credentials, lateral movement, and more. You'll investigate, query, and hunt your way through the puzzle — competing on a leaderboard against your peers to see who can move fastest without missing a beat.
Come for the competition. Leave with the confidence to run these tools solo.
Time: 9:30 a.m. GMT / 10:30 a.m. CET
Location: Virtual (Zoom)
Why Join?
- 🏆 Compete live against fellow channel partners in a scored, CTF-style leaderboard
- 🎯 Learn by doing, freeform challenges built on real attack scenarios and real malware
- 🧠 Build product mastery across Endpoint, Purple AI, AI SIEM, Cloud Native Security, and Prompt Security
- 📜 Earn 3 CPE credits per workshop toward your continued professional development
- 💻 100% virtual, no travel, no downtime, just log in and hunt
The Five Workshops:
| Workshop | Date | Focus |
|---|---|---|
| Endpoint Security | Thursday, 29 October, 2026 | EDR queries, incident analysis, threat hunting |
| Purple AI | Thursday, 12 November, 2026 | AI-powered threat hunting, APT investigation |
| AI SIEM | Thursday, 26 November, 2026 | Query mastery, Singularity Data Lake |
| Cloud Native Security | Thursday, 10 December, 2026 | Misconfigurations, exposed secrets, exploitable clusters |
| Prompt Security | Thursday, 14 January, 2027 | Shadow AI discovery, agentic risk, data leakage prevention |
Virtual event. Join any single workshop or the full series.
Endpoint Security - What to Expect
- Train directly on the SentinelOne Endpoint Protection Platform
- Learn to identify malware, spot lateral movement, and uncover threat indicators fast
Purple AI - What to Expect
- Investigate common and advanced persistent threat (APT) attack vectors and methodology
- Master Purple AI and see firsthand how effortless AI-driven threat hunting can be
- Get hands-on experience hunting real indicators left behind by real malware
AI SIEM - What to Expect
- Master the SentinelOne query language as you work the case
- Use Singularity Data Lake to craft queries and trace exactly what the attacker did
Cloud Native Security - What to Expect
- Investigate misconfigured cloud resources, leaked credentials in source code, and exploitable Kubernetes nodes
- Master the CNS interface and understand exactly how it protects anyone running in the cloud
Prompt Security - What to Expect
- Uncover unsanctioned AI tools, rogue agents, and unauthorized MCP connections hiding in plain sight
- Investigate real-world scenarios of sensitive data leakage, from employees leaking PII and source code to external models to AI applications shipping without proper guardrails
- Master the Prompt Security platform and learn how to enforce policy at machine speed, govern what agents can access, redact risky data in real time, and build the audit trail regulators expect
In partnership with:
 |
| Earn a CPE Credit/s This event has been approved and endorsed by ISC2 and CPE credits will automatically be credited to your member account within four to six weeks. |