Get Ready for BOTS10: The Legendary Challenge Returns to .conf25!

[iamryan]

Heelllllloooooo Splunkers,

The countdown is on: Splunk .conf25 is happening in Boston from September 8–11, and with it comes one of the most anticipated events for security practitioners — Boss of the SOC (BOTS)!

Whether you’re a first-timer or a seasoned BOTS veteran, this year is going to be something special. We’re celebrating 10 years of BOTS with BOTS10 — and trust us, it’s going to be one for the books.

What Is BOTS?

If you’re new here, BOTS is a blue-team, jeopardy-style, capture-the-flag-esque (CTF) competition. You and your team will step into the role of Alice Bluebird, a security analyst protecting Frothly — your fictional brewery-slash-hot-dog-food-truck company — from the notorious APT group Angry Alpaca.

You’ll investigate real-world security incidents using Splunk Enterprise, Splunk Enterprise Security, SOAR, Attack Analyzer, and maybe even a few surprises. You’ll need speed, accuracy, and a good sense of humor (yes, there are easter egg questions, and yes, they’re wild).

Who Should Play?

If you’re wondering if this is for you — it is.
Whether you’re a Splunk security pro or still learning the ropes, BOTS is built to challenge and excite participants at every level. There are hints, onsite coaches, and tons of support to help you succeed.

The best part? BOTS is a team game, so bring your crew — or join forces with new friends. You’ll come out of it with stronger skills, new connections, and maybe even some serious bragging rights.

How to Join BOTS10

1. Register for .conf25

2. Look for the BOTS registration link in your confirmation email

3. Sign up early — this event fills up fast!

BOTS10 happens on Sunday, September 8 at 7:00 PM (doors open at 6:30 PM)

 Pro Tips for First-Time BOTS Players

• Bring a laptop with WiFi and a supported browser

• Review previous BOTS events, workshops, or the “Hunting with Splunk” blog series

• Try out free training on Splunk security products

• Stay hydrated and pace yourself — it’s a marathon, not a sprint

Let’s Talk About It in Slack

Whether you're recruiting teammates, hyping yourself up, or sharing memories from past years, join the conversation in the Splunk Community Slack channel #conf25. New players can ask questions, returning champs can drop tips, and we’ll all count down to BOTS10 together.

Register for .conf25 today

Additional Reasons to Attend .Conf25

• Why You Should Register for Splunk University at .conf25
• What to Expect in the .conf25 Community Zone
• It's Customer Success Time at .conf25
• Raise Your Skills at the .conf25 Builder Bar: Your Splunk Developer Destination
• Pro Tips for First-Time .conf Attendees: Advice from SplunkTrust
• Make Your Case: A Ready-to-Send Letter for Getting Approval to Attend .conf25
• Observability Professionals: Build Resilience and Visibility with These .conf25 Sessions
• Splunk Developers: Go Beyond the Dashboard with These .Conf25 Sessions
• Calling All Security Pros: Ready to Race Through Boston?
• Security Professional: Sharpen Your Defenses with These .conf25 Sessions
• Splunk Admins: Build a Smarter Stack with These Must-See .conf25 Sessions
• 4 Ways the Splunk Community Helps You Prepare for .conf25

 

[efavreau]

This is intimidating for first-timers. I regretfully was intimidated the first time and walked out. Overcome your fear and do it! It's like drinking from a firehose and you'll never have more fun doing it - because it isn't actual work!
Shout out to the teams who took me on as a single player! Was great when I didn't have a team of my own. BOTS has been part of my experience 4 times after that walk-out, and I look forward to it every .conf I go to.