Drinking from the same firehose - how red teams out run threat actors (Even @ydoow would be shocked)

No ratings

Presented at STEELCON 2025 by

Andy Gill

Craig Underhill

Red teaming has evolved — and so have threat actors. This talk explores what it’s like to red team at one of the world’s largest security vendors, where the pace is relentless and the information flow never stops. Collaboration across incident response, threat hunting, and endpoint intelligence teams is critical to replicating real-world adversaries with precision and creativity. We’ll dive into how cross-functional insights help uncover emerging attack paths, adapt to shifting techniques, and turn threat intelligence into actionable offensive strategies. From technical deep-dives into evolving attack surfaces to the practical realities of surviving the daily information tsunami, this talk shares hard-won lessons on staying ahead of both threat actors and the chaos of the modern security landscape.