Foundry 17

Nov 16 - Nov 20, 2020 : San Diego, California

Registration is Open until November 1!



Registration is open until November 1!


Wondering which class to take?

Class Descriptions

Event Location

Catamaran Hotel

☎️ +1-858-488-1081

📍 Location in Google Maps
3999 Mission Boulevard
San Diego, California
United States

Unforseen events outside our control may force a change in venue: we will email the address used to register if this happens.

Parking Fees

Guests Non-Guests
Valet $30/day $10 first hour, $2 each additional 30m. Maximum $35/day.
Self-Park $26/day $10 first hour, $2 each additional 30m. Maximum $35/day.

Call for Presentations

On Friday, October 20, we will be hosting presentations on technical cybersecurity-related topics from participants, Cyberfire staff, and other invited guests.

The CFP is open until September 20, 2020!

Want to present?

Contact Us


Entry-level to experienced cybersecurity analysts from:

  • US federal/state/local/tribal/territorial government
  • US critical infrastructure
  • Students/faculty/staff from local educational partners
  • Multinational partners
Basically, anyone who will be attending this Foundry event!

What we're looking for

  • Threat overviews -- especially those facing the US government; many people don't have a good foundation for understanding what our threats are, outside of the news cycle.
  • Overviews of specific threat landscapes -- ICS, cloud, BEC, sites working on technology X, etc.
  • Deep-dives on specific cybersecurity incidents
  • Deep-dives on specific threat actors and their activities
  • Discussions about areas of ongoing cybersecurity research

What we're not looking for

  • Sales pitches
  • Deep-dives on organization X or how they're changing their organizational structure
  • Liturgical recitation of intelligence reports, lists of indicators, or reports of "them be scanning us"

You will need a laptop to participate in Cyber Fire foundry. While Cyber Fire foundry is designed to be as benign as possible, you could be working with actual malware, therefore we encourage all participants to adequately prepare their equipment.



Lobby Russeau
15:00 - 18:00 Early Registration Laptop Configuration Help


Lobby Classroom (see map)
08:00 - 08:30 Registration
08:30 - 12:00 Class Day 1
12:00 - 13:30 Break
13:30 - 17:00 Class Day 1

All classes are two (2) days long. You may register for only one two-day class per event.


Classroom (see map)
08:30 - 12:00 Class Day 2
12:00 - 13:30 Break
13:30 - 17:00 Class Day 2

Reception from 17:00 - 20:00, location TBA

All classes are two (2) days long. You may register for only one class per event.


Kon Tiki Aviary
08:30 - 09:00 Opening Remarks
09:00 - 12:00 Puzzles Puzzles
12:00 - 13:30 Break (recommended) Break (recommended)
13:30 - 17:00 Puzzles Puzzles


Kon Tiki Aviary
08:30 - 12:00 Puzzles Puzzles
12:00 - 13:30 Break (recommended) Break (recommended)
13:30 - 17:00 Puzzles Puzzles

Reception from 17:30 - 19:00, location TBA


Boardroom West Toucan Macaw
09:00 - 10:00 DOE Supply Chain Risk Management Program

Rob Brougham, DOE

ICS Threat Landscape & CIP Security for Ethernet/IP-based devices


KTANE: Incident Management Game

Grace Herrera, LANL

10:00 - 11:00 Ask Me Anything about Puzzles

Neale Pickett, LANL

TRITON and the Evil Twin

Paul Forney, Schneider Electric

Smile - You’re on Camera!

Jacob Benjamin, INL

11:00 - 12:00 FBI Threat Briefing


Capture the Cyber Flag: Developing a Fly Away Kit

Kelcey Tietjen, SNL


Become a tool builder.

Cyber Fire Foundry guides you through creating custom solutions for investigating cybersecurity incidents.

Rather than teach recipes for yesterday’s problems, our veteran staff teaches you to create new custom solutions, so you can handle whatever arrives after you leave our event.

More about Foundry