Aaron Soto is at Corelight, teaching users about the Zeek network monitoring platform. He's recently been part of the Metasploit development team, DEF CON’s OpenSOC blue team capture-the-flag event, and coaching UT Austin students on both defensive and offensive techniques. His passion is teaching up-and-coming blue teams how to find and stop attacks on their networks.