Coverage on paper, proof in production
Save the date. The session is confirmed for 18 September 2026, online. The start time, the full running order and the registration link are being finalized with Tidal Cyber, and we will publish them here as soon as they are set. Ask us about the session in the meantime and we will make sure you get the invite first.
Threat-informed defense starts with knowing which techniques matter to you and which of them you are supposed to catch. That is the map. It is not the proof. The map says a technique is covered. It does not say the detection still fires today, against the way an operator actually runs that technique, in the environment you actually have.
Crimson7 and Tidal Cyber take the two halves of that problem in one session. The coverage picture on one side, the evidence that the coverage is real on the other.
What the session covers
- Where a coverage map ends and validation has to start
- Running real adversary behavior against live defenses with HackerFlow, and reading the attack-to-alert correlation rather than a pass or fail
- Turning a confirmed gap into Detection- and Response-as-Code instead of a finding in a report
- Taking a CTI lead into an executable hunt with 7Hunter when the answer is that nobody was looking
- What audit-ready evidence of all this looks like under DORA and NIS2
That is the shape of the session. The exact running order and the split between us and Tidal Cyber are still being agreed.
Who should attend
Security architects and detection leads who own whether the controls work rather than whether they are installed. SOC and detection engineers who have to build and maintain the rules. Red and purple leads who want the annual exercise to become a continuous one. CISOs who need evidence rather than assurance.
Presenters
Joey Verleg, Head of Managed Services at Crimson7. Joey runs the platform side of the session, HackerFlow on the attack side and 7Hunter on the hunting side.
A presenter from Tidal Cyber joins for the coverage half of the session. Name to be confirmed.