Red vs Blue: AI Edition – the NT classic gets an AI upgrade
Some NT sessions become traditions. Red vs Blue is one of them.
Year after year, Miha Pihler and Milan Gabor, long-time NT speakers and cybersecurity experts with extensive experience in Microsoft environments, return to the NT stage to put attack and defense to the test through practical, real-world demonstrations.
Last year's Red vs Blue: EDR / XDR Edition was the most attended technology session at NT 2025. This year, the legendary NT duo is back. And AI is entering the game.
Artificial intelligence is changing both sides of cybersecurity. Attackers can use it to analyze environments, identify weaknesses and plan their next move. Defenders can use the same technology to detect suspicious behavior, connect signals and respond to incidents faster.
Red vs Blue: AI Edition will put both sides to the test.
On the Red Team side, Miha and Milan will demonstrate how AI can support domain environment analysis, identify misconfigurations, help plan paths to higher privileges and assist with attacks on identities and Microsoft 365.
On the Blue Team side, they will show how AI can help analyze Windows and Microsoft 365 events, identify suspicious behavior, correlate activities and accelerate incident response.
As always, the focus will be on practical demonstrations, showing how AI is changing the classic battle between attacker and defender across Active Directory, Entra ID and Microsoft 365 environments.
Red vs Blue has always been about seeing cybersecurity from both perspectives. Understanding how attackers think makes it easier to defend. Seeing how defenders detect and respond helps reveal what effective defense actually requires.
This year, both sides have AI at their disposal.
Who uses it better?
There's only one way to find out.
Red vs Blue: AI Edition
Wednesday, 23 September
09:00–11:00
Europa A+C
Explore the NT Technology program and save the time for one of NT's most anticipated cybersecurity sessions.
