Cyber Fire Foundry prepares attendees for tomorrow’s challenges by teaching how to create custom solutions for investigating cybersecurity incidents.
Rather than teaching cookie cutter recipes, our experienced staff will help you develop the ability to create innovative solutions to pick apart whatever arrives after you leave our event.
Foundry 2025-2 begins with 3 days of hands-on class instruction, guided by seasoned cyber security responders.
The rest of the event places participants on teams, working together on many challenges, in a collaborative exercise. The exercise has been custom crafted to provide opportunities to apply new skills and further expand on practical learning.
Today’s cybersecurity threats are growing exponentially, but so is the workforce to combat those threats. You can be part of the solution, which is why we want you to join us.
We hope you can join us! Please reach out to cyberfire@hq.doe.gov if you have any questions.

Unearth and understand hidden data from network traffic and obfuscated files.
Full DescriptionIntermediate - Examine malicious software to discover capabilities, methods, and more.
Full DescriptionAdvanced - Examine malicious software to discover capabilities, methods, and more.
Full DescriptionLearn the peculiarities of computers that interact with the physical environment.
Full DescriptionA broad, but shallow introduction to incident investigation techniques. A great place to get started!
Full DescriptionHow to manage incident response teams and communicate clearly and effectively to vested parties.
Full DescriptionAdvanced topics in incident response coordination, in daily operations, and large incident management. 5 full days of classwork.
Full DescriptionBoston, Massachusetts
USA
https://www.hilton.com/en/hotels/bossrhh-hilton-boston-park-plaza/

If the Cyber Fire event is delivered in-person, are travel expenses covered by the Department of Energy?
No, travel expenses are not covered. It is recommended to use the hotel room block on the Cyber Fire website's registration page for room rate discounts.
How do I cancel my registration if I can no longer attend?
Review the registration confirmation email sent from info@cyberfire.training, select ”view order details” and click “cancellation.”
How do I select a course that best aligns with my skillset?
Courses are categorized by Beginner, Intermediate, and Advanced. Review the course descriptions on the Cyber Fire website's registration page.
What happens after I register?
You will receive an email from info@cyberfire.training confirming your registration. If your registration is approved, you will receive a confirmation email for your attendance.
Where can I see the Portal link?
Review the registration confirmation email sent from info@cyberfire.training, the Portal link is contained within the email.
What time should I arrive?
Check-in begins on the Sunday prior to the event. A registration desk is located inside the venue’s main entrance.
Where can I view future events?
Future events will be advertised on the Cyber Fire website's home page at the conclusion of the current event.
Where can I find answers to the Collaborative Puzzles?
Answers are not provided. Participants are encouraged to keep a list of their answers, and more importantly, solution notes! The Collaborative Puzzles are Teaching Puzzles where how you came to an answer is more important than the answer itself.
Is this a conference?
No. This is a training event. There are no presentations, there are only classes and the collaborative exercise.
Vendor Information
Vendors at our events get a table and banner on Thursday and Friday in the "Puzzles Room", where participants gather to work through our collaborative exercise. There is no separate "vendor room": you are part of the event.
Vendors at Foundry events may also create and submit up to two (2) puzzles for use in the Puzzles Collaborative Exercise (Thurs/Friday). This provides you with a chance to engage with potential and current users of your product on a deeply technical level that is relevant to them.
Hosting options
Due to DOE funding structures, we have to call it "hosting".
Event Coffee Breaks
Evening Networking Event
Rules
Alcohol Policy
If a vendor chooses to serve alcohol, drink coupons must be provided (2 drink coupons per person maximum). If a vendor chooses to serve alcohol, food must also be provided.
No Prizes for Raffles
Cyber Fire does not award prizes of any sort. Tchotchkes / Booth Swag are fine, we just don't want any contests competing with our contest.
We do not provide contact lists
You are free to ask people to give you their email address and other contact information, but our event does not provide this information.
Begin | End | What |
---|---|---|
September 1, 2025 | Submit Rough Draft | |
September 15, 2025 | Submit Initial Working Draft | |
October 6, 2025 | Submit Final Submission | |
October 29, 2025 18:00 | October 29, 2025 22:00 | Vendor table setup |
October 30, 2025 08:30 | October 31, 2025 12:00 | Vendor tables open |
October 30, 2025 10:00 | October 31, 2025 12:00 | Vendor puzzles open |
All times are in event local time zone
Puzzle Information