Webinar Series:
Inside the SOC.
The Blackpoint Threat Briefing 

Real Attacks. Real Response.

Every month, Blackpoint’s SOC walks through what’s actually happening across live environments. 

Not theory. Not predictions.
Just real-world activity and how attackers are operating right now. 

No demo. No sales pitch. Just real threat intelligence from the SOC. period 

Held the first Tuesday of every month at 10:00 AM MT

What to expect

Each session focuses on real attacks our SOC is actively investigating. 

We walk through how attackers gain access, how they move inside environments, and how those threats are actively contained and responded to. 

No two sessions are exactly the same, but every session is grounded in real-world activity. 

What makes this different 

Most threat briefings show you alerts. 

This one shows you what happens next. 

Blackpoint’s SOC doesn’t just detect activity.
It investigates, responds, and contains threats in real time. 

That means you’re not just seeing what attackers do.
You’re seeing how those attacks are actually stopped. 

Why attend 

Most security conversations focus on tools. 

This one focuses on how attacks actually work. 

Across environments, attackers are:

• Gaining access through credentials and trusted entry points
• Operating through legitimate tools and normal workflows
• Moving laterally without triggering traditional alerts
• Understanding these patterns is critical to improving detection and response

 

About the series 

Inside the SOC is a recurring briefing from Blackpoint’s Response Operations Center. 

Each session is focused on what’s happening right now, based on real investigations across live environments. 

No scripts. No heavy prep. 
Just practitioners walking through what they’re seeing.