SO-CON 2026 is set for April 13-14, 2026, at Convene in Arlington, VA. This conference focuses on identity-based security and attack path management, offering a unique platform for professionals in the field. Over the course of two days, attendees can participate in talks, research presentations, and networking opportunities. Following the main conference, four days of hands-on training sessions will take place from April 15-18, led by experienced practitioners. Keynote speaker Kevin Mandia, founder of Mandiant, will address the evolving threat landscape and what security leaders should prioritize. The registration package provides access to all in-person talks, social events, and training courses. Notably, federal employees may attend for free with agency ethics approval, which highlights the conference's inclusivity for industry professionals. The training sessions cover various advanced topics. For example, the "Adversary Tactics: Tradecraft Analysis" course focuses on Windows attack techniques and how to create effective detection strategies. The "Red Team Operations" course simulates a complex enterprise environment where participants can apply their skills against active defenders. Other courses focus on identity-driven attacks and detection engineering using open-source tools. Each course includes a free conference pass, emphasizing the value of immersive, hands-on learning.