16-17 November 2024


Seattle, Orlando, Montreal, Edinburgh, Amsterdam, Bonn, Kuala Lumpur, and Online


$170 USD Online, or $300+ On-Site

Countdown to DEATH

About the event

  • DEATHCon is a globally-distributed cybersecurity conference for Detection Engineering and Threat Hunting (DEATH).
  • The conference is 100% hands-on: Workshops, Hacking Laboratory, and Capture-the-Flag.
  • All the workshop instructions are pre-recorded for convenience in all time zones.
  • The workshop leaders are available through Slack chat at convenient times in their home time zone.
In-Person Gatherings

All the content and the lab environment are available to participants online - there is no need to travel anywhere to learn from the Workshops and get help from the workshop leaders. However, if you would like to meet other DEATH practitioners in person, enjoy some food and beverages together, and collaborate in-person, there are six locations around the world that will be hosting DEATHCon gatherings for groups of 10 to 50 people, depending on the location. On-Site tickets are sold separately by each site organizer, and include access to all the same content as an Online ticket.


Hands-on workshops to learn detection engineering skills are the heart of DEATHCon.

See 2023 workshops

Lab Access

Join your VMs to our detection engineering lab keep learning through the end of the year (or later!)

Time Zones!

All the video is recorded, so you can watch workshop videos in your time zone or weeks later.


Some free tickets are available. Or, you can volunteer to help for a free ticket.

Scholarship or Volunteer

CFP: Call for Workshops, Call for Volunteers

CFP: Workshop Proposals

If you would like to lead a workshop, please first review some of the successful workshops from past years to get an idea about what has worked well before. A wide range of topics from using offensive security tools for purple teaming to writing queries in KQL/Splunk/Elastic, or malware analysis to write YARA rules, etc.

Submit your response to the CFP here.


If you would like to help set up and run the lab environment, we need people in many time zones to help keep the lab running smoothly. Volunteers get a free (online) ticket and many thank-yous from attendees. We also need a couple of volunteers to help run logistics at the Seattle site (free in-person ticket and food).

Submit your application to volunteer here.

Workshop Videos from Past Years

All the workshop materials remain the property of the workshop leaders. Some workshop leaders have chosen to release their materials publicly after DEATHCon is over, and we encourage all to share the learning for free!

Pricing table (USD)

Online Ticket

Participate from your home in any time zone!
  • VPN and Lab Access for 2+ months
  • Search logs in Sentinel, Elastic
  • Slack Access
  • Long-term access to workshop recordings on Skool

In-Person Gatherings

Sold by site organizers, price depends on site
  • Includes Online ticket in price
  • Lunch provided both days
  • Dinner and drinks provided Saturday
  • Refreshments on-site
  • See site-specific details

T-shirts and SWAG

Sold separately to keep ticket cost low
  • Shirts
  • Hoodies
  • Shipped direct to you
  • Conference does not take any profit from shirts

Important Dates

1 April 2024: CFP Opens, Workshop and Volunteer Applications Open
1 June 2024: First Round CFP Acceptance, CFP will remain open
1 July 2024: Early ticket sales (for past years attendees)
7 July 2024: Ticket sales general availability
7 Sept 2024: Lab Network and Architecture Planning Starts
5 Oct 2024: Lab Available for Workshop Leaders
16-17 Nov 2024: Conference!
31 Dec 2024: Lab will remain available at least until end of year.
Feb/Mar 2025: Stretch goal to keep lab available (until money runs out).

Get your tickets

Tickets will go on sale in July. Online tickets and Seattle site tickets are sold by Randy. Tickets for all other sites are sold by each site organizer, and local taxes may apply.