In this knowledge session we have discussed together with the colleagues in the field about the way in which Blue Teams are organized, but especially about how they work. According to expert Marcus Bakker, things could be better. It is not just Threat Hunting, but what if you are an attacker on the track ... then it starts! How do you ensure that you maintain your defenders advantage and exploit it optimally? That is an exellent question and there are plenty more examples we have hear during this session. Together with experienced Red Teamer Marc Smeets from Outflank, who has shed light on the attacking side, Marc and Marcus led a session that was absolutely one for in the books!