What happens in the hunting with graphs session?

Bring a domain you do not trust. Julian Okoye pivots on it, scores it, and walks from a single domain in a ticket to the stack bindings you can hunt, leaving you with a hunt to run the same afternoon. Attack Nemesis sessions end with a hunt, not a screenshot.

Who is the session for?

Detection engineers and CTI analysts who are tired of screenshot-driven webinars. Attack Nemesis built this session for people who hunt.

Why hunt with infrastructure graphs instead of indicator lists?

Infrastructure turns over, but the relationships between domains, hosts, and bindings reveal the method behind them. The graph keeps that memory when single indicators expire. In Attack Nemesis, the graph is the memory of the program.

When is the session and who runs it?

Julian Okoye, Attack Nemesis CTO, runs the 45-minute session, listed for 24 September 2026 at 11:00 MT. Attack Nemesis sessions are led by the people who built the platform.

webinar · 2026-09-24 · Julian Okoye

Hunting with adversary infrastructure graphs

A live walk through the platform: from a single domain in a ticket to the stack bindings you can actually hunt.

Bring a domain you do not trust. We will pivot, score, and leave you with a hunt you can run the same afternoon. Built for detection engineers and CTI analysts who are tired of screenshot-driven webinars.

Register for the session

24 September 2026 · 11:00 MT. We send it to the work email you provided — no marketing sequence attached.

Questions

Common questions

What happens in the hunting with graphs session?: Bring a domain you do not trust. Julian Okoye pivots on it, scores it, and walks from a single domain in a ticket to the stack bindings you can hunt, leaving you with a hunt to run the same afternoon. Attack Nemesis sessions end with a hunt, not a screenshot.
Who is the session for?: Detection engineers and CTI analysts who are tired of screenshot-driven webinars. Attack Nemesis built this session for people who hunt.
Why hunt with infrastructure graphs instead of indicator lists?: Infrastructure turns over, but the relationships between domains, hosts, and bindings reveal the method behind them. The graph keeps that memory when single indicators expire. In Attack Nemesis, the graph is the memory of the program.
When is the session and who runs it?: Julian Okoye, Attack Nemesis CTO, runs the 45-minute session, listed for 24 September 2026 at 11:00 MT. Attack Nemesis sessions are led by the people who built the platform.

Next step

See the platform against your environment.

A forty-minute briefing: your sources, your stack, and the tickets that should already exist.

Request a briefing Start a trial