Are you a cyber defender looking to keep up on the newest tools, technology, and security concepts? Then BLUEPRINT is the podcast for you! Tune in to hear the latest in cyber defense and security operations from blue team leaders and experts. With a focus on learning, BLUEPRINT includes interviews with today’s top security practitioners defending the world’s most respected brands, and in-depth explanations on the newest technologies, protocols, and defensive tools. BLUEPRINT, is a podcast hosted by John Hubbard and brought to you by the SANS Institute. BLUEPRINT - your one-stop shop for taking your defense skills to t...
Latest episodes
-
44 min
Building Trust Into Agentic SOC Tools with Oren Saban
Agentic SOC platforms are no longer a future pitch — they're shipping, and teams are using them to triage and investigate cases end to end. But speed and automation only matter if…
-
55 min
Preventing Silent Failures with Nir Loya Dahan
This episode is sponsored by Fig.This episode features a conversation with Nir Loya Dahan, Co-Founder and CPO at Fig, recorded at RSAC 2026. Our discussion covers telemetry health…
-
49 min
The 2 AM Call: A Ransomware Negotiator's Playbook with Wade Gettle
What happens after you discover ransomware? You have to talk to the attackers. And that conversation can make or break your entire response.In this episode, Wade Gettle, a professi…
-
1 h 36
Infiltration Alert! How to Catch Fake IT Employees in Your Network with Zak Stufflebeam
This episode is a big one! We kick off 2026 with a critical lessons learned on how to detect and prevent the threat of fake IT workers infiltrating your organization through the st…
-
1 h 06
Leading by Example: Confidence and Responsibility in Cybersecurity with Zak Stufflebeam
In this episode, we sit down with Zak Stufflebeam, Director of Cybersecurity at a publicly traded insurance company. Zak shares his unique journey from the military to leading secu…
-
52 min
From the SANS Cyber Leaders Podcast: Fighting Back with John Hubbard
This podcast episode is from the SANS Cyber Leaders Podcast.The episode features Blueprint host John Hubbard, where he talks with hosts James Lyne and Ciaran Martin on the ever-cha…
-
1 h 06
Redefining Security Operations: Lessons in AI Integration with James Spiteri
In this episode of Blueprint, host John Hubbard sits down with James Spiteri from Elastic to explore the transformative power of AI on the SOC. They delve into how advanced AI tech…
-
47 min
From Special Forces to Cybersecurity: Rich Greene on Communication and Persuasion in Infosec
In this episode, we sit down with Rich Greene, a former United States Army Special Forces Green Beret and current SANS instructor for SEC275 and SEC301. Rich shares his incredible…
-
1 h 03
SOC Dashboards Done Right with Ryan Thompson
In this episode, we sit down with Ryan Thompson, a seasoned expert in building dashboards that actually detect real threats—not just look pretty. With experience at Elastic, Alert…
-
30 min
Success Simplified - The 3 Step Process for Hitting Your Career Goals in 2025 with John Hubbard
Surprise!! It's a mini solo episode to kick off the new year and it's on one of the most important topics there is - how to achieve your goals in 2025 and beyond!In this episode I…
-
54 min
How Phishing Resistant Credentials Work with Mark Morowczynski and Tarek Dawoud
Mark Morowczynski returns for his 4th(!) time with his Microsoft coworker and identity and authentication expert Tarek Dawoud in this incredibly insightful conversation on the what…
-
36 min
From Clues to Containment - Unraveling A Gift Card Fraud Scheme with Mark Jeanmougin
In this episode, we take you behind the scenes of a complex gift card fraud investigation. Join host John Hubbard and guest Mark Jeanmougin as they explore the intricate details of…
-
1 h 35
How GenAI is Changing Your SOC for the Better with Seth Misenar
In this mega-discussion with Seth Misenar on GenAI and LLM usage for security operations we cover some very interesting questions such as: - The importance of natural language proc…
-
1 h 31
Bonus Episode: What does it take to author a cybersecurity book?
Have you ever wondered what it takes to write and publish an information security book? In this special bonus episode following season 4, John discusses with Kathryn, Ingrid, and C…
-
1 h 26
Strategy 11: Turn up the Volume by Expanding SOC Functionality
"This final chapter of the book is no simple closer! "Turn Up the Volume by Expanding SOC Functionality" covers testing that your SOC is functioning as intended through activities…
-
53 min
Strategy 10: Measure Performance to Improve Performance
"Metrics, is there any more confusing and contentious topic in cybersecurity? In this episode the authors cover their advice and approach to measuring your team so that issues can…
-
1 h 03
Strategy 9: Communicate Clearly, Collaborate Often, Share Generously
"Research has shown that communication is one of the most important factors for success in security incident response teams. In this chapter, the authors discuss the critical types…
-
1 h 25
Strategy 8: Leverage Tools and Support Analyst Workflow
Tool choice can be a make-or-break decision for security analysts, driving whether getting work done is a struggle, or an efficient, stress-free experience. How can we select the r…
-
1 h 04
Blueprint Live at the SANS Blue Team Summit 2023
In this special live recording from the SANS Blue Team Summit 2023, Kathryn Knerler, Ingrid Parker, and Carson Zimmerman joined John Hubbard they share their insights and expertise…
-
1 h 03
Strategy 7: Select and Collect the Right Data
There's no denying that the average security team is completely overwhelmed with options for data to collect. With a deluge of endpoint, network, and cloud data sources to collect,…