Entry Point

◇◇◇ Beginner

A foundational introduction to digital forensics and incident investigation through hand-on exercises in binary understanding, forensic memory and disk image analysis, network traffic inspection, and end-to-end investigation of a simulated breach incident.

Full Description

Operational Technology 1

◇◇◇ Beginner

Identify unique characteristics of computers interfacing with physical environments and observe some of their security challenges.

Full Description

Incident Coordination 1

◆◇◇ Intermediate

Learn to effectively manage and respond to cyber incidents through the Incident Response Lifecycle, emphasizing calm coordination, data analysis, and communication with leadership.

Full Description

Host Forensics

◆◇◇ Intermediate

Learn the fundamentals of conducting a forensic analysis of a Windows system by analyzing memory images collected from compromised hosts.

Full Description

AI & Cloud Forensics

◆◆◇ Advanced

Learn the fundamentals of securing and investigating cloud environments.

Full Description

Malware Analysis 1

◆◇◇ Intermediate

Gain foundational knowledge and practical skills to identify, analyze, and mitigate malware threats, using hands-on techniques and tools to understand malicious software behavior and its impact on systems.

Full Description

Operational Technology 2

◆◆◇ Advanced

Delve into the components of operational technology systems and examine their distinct cybersecurity challenges in depth.

Full Description

Network Archaeology 2

◆◆◆ Expert

Unearth and understand hidden data in network traffic, emphasizing the identification of novel or misused protocols and reverse engineering their protocols and artifacts, including those trying to hide behind encryption, compression, and novel encoding.

Full Description

Mon

Class

08:30 - 17:00

Tue

Class

08:30 - 17:00

Wed

Class

08:30 - 17:00

Thu

Exercise

08:30 - 17:00

Fri

Exercise

08:30 - 12:00

Cyber Fire Foundry is a 5-day event.

Days 1-3: Class

3 days of hands-on instruction in a single class, guided by seasoned cyber security responders.

Days 4-5: Collaborative Exercise

Participants form teams, working together on challenges in a collaborative exercise. The exercise has been custom crafted to provide opportunities to apply new skills and further expand on practical learning.

Sheraton Philadelphia University City Hotel

3549 Chestnut St
Philadelphia, PA
19104
https://www.marriott.com/en-us/hotels/phlus-sheraton-philadelphia-university-city-hotel/overview/

Special Room Rates Available

Room rate valid until 2026-09-15T06:00:00-07:00 or until full. During this time, a link will be present at the top of this page.

Vendor Information

Vendors at our events get a table and banner on Thursday and Friday in the "Puzzles Room", where participants gather to work through our collaborative exercise. There is no separate "vendor room": you are part of the event.

Vendors at Foundry events may also create and submit up to two (2) puzzles for use in the Puzzles Collaborative Exercise (Thurs/Friday). This provides you with a chance to engage with potential and current users of your product on a deeply technical level that is relevant to them.

Vendor Puzzle Information

Hosting options

Due to DOE funding structures, we have to call it "hosting".

Event Coffee Breaks

Provide coffee during one of our nine (9) breaks throughout the week. Vendors may procure coffee and/or a light snack for breaks. Vendors may host coffee breaks on their own or partner up with another vendor. Coffee breaks are filled on a first come, first served basis.

Evening Networking Event

Vendors wishing to take their involvement to the next level may, on their own or with a partner vendor, host an evening social event. These events provide an opportunity for participants to mingle, interact with staff and management, and learn more about your product or service. Evening social hosting preference is given to the first two vendors per event who commit.

Evening social events usually run for 1-2 hours and tend to be hosted at a restaurant/venue a short distance away from the event venue. If Beer/Wine/Liquor are provided, drink coupons must be used, and food must be served. No more than 2 drink coupons may be given to any attendee.

Rules

Alcohol Policy

If a vendor chooses to serve alcohol, drink coupons must be provided (2 drink coupons per person maximum). If a vendor chooses to serve alcohol, food must also be provided.

No Prizes for Raffles

Cyber Fire does not award prizes of any sort. Tchotchkes / Booth Swag are fine, we just don't want any contests competing with our contest.

We do not provide contact lists

You are free to ask people to give you their email address and other contact information, but our event does not provide this information.

Important Dates

Begin	End	What
	2026-09-07T08:00:00-05:00	Submit Rough Draft
	2026-09-21T08:00:00-05:00	Submit Initial Working Draft
	2026-10-12T08:00:00-05:00	Submit Final Submission
2026-11-04T08:00:00-05:00 18:00	2026-11-04T08:00:00-05:00 22:00	Vendor table setup
2026-11-05T08:00:00-05:00 08:30	2026-11-06T08:00:00-05:00 12:00	Vendor tables open
2026-11-05T08:00:00-05:00 10:00	2026-11-06T08:00:00-05:00 12:00	Vendor puzzles open

All times are in event local time zone

Puzzle Information

If the Cyber Fire event is delivered in-person, are travel expenses covered by the Department of Energy?

No, travel expenses are not covered. It is recommended to use the hotel room block on the Cyber Fire website's registration page to secure the government per diem rate.

Is this class offered hybrid or asynchronously

No. To maintain the integrity and quality of the program, it is only offered in person. Participants are expected to attend all five days.

How do I switch classes; transfer my ticket to a co-worker; or change or cancel my order?

Review the registration confirmation email sent from info@cyberfire.training, and click ”view order details”.

Where can I see the portal link?

Review the registration confirmation email sent from info@cyberfire.training, the Portal link is contained within the email.

Where can I view future events?

Future events will be advertised on the Cyber Fire web site.

Where can I find answers to the class challenges or collaborative exercise?

Answers are not provided. Participants are encouraged to keep a list of their answers, and more importantly, solution notes! The Collaborative Puzzles are Teaching Puzzles where how you came to an answer is more important than the answer itself.

Is this a conference? Are any meals provided?

Cyber Fire Foundry is not a conference: it is a training event. There is no registration fee. No meals are provided.