A New Threat Emerges: APAC BOTS Day 2026 Registration Is Open

Security Simon O'Brien

Key takeaways

  1. APAC BOTS Day 2026 returns with a new cybersecurity challenge, giving participants a fun, hands-on way to build investigation and threat-hunting skills.
  2. Attendees can compete individually or in teams, connect with security professionals across the region, and join virtually or in person.
  3. The event helps participants prepare for future competitions, including BOTS at .conf26, with training resources and expert support available throughout the day.

It's time to block out your calendar, update your out-of-office notification and tell your boss you're on an all-day training session.

That's right — BOTS is returning to APAC, and it's more time-zone appropriate than ever! After the incredible global reception of Boss of the SOC (BOTS) v9, we've been hard at work preparing the next chapter. Following the success of previous APAC BOTS Days, we're back in 2026 with a brand new scenario, fresh data, and harder questions.

Register Now

It's going to be an action-packed day full of the BOTS magic you know and love, so come join us! Our session will kick off at 12:30pm AEST (GMT+10) on August 6, 2026, with the competition starting at 1pm sharp. This will be an excellent chance to hone your skills and be ready to compete on the global stage at Splunk .conf26 in Denver, Colorado in September.

If you happen to reside in Brisbane, Sydney or Melbourne, we will be hosting in person events. Keep an eye out for registration for this as it is sure to be a great day.

What’s the Story This Time?

After the events of last year's attack, Alice Bluebird (our courageous SOC analyst and BOTS protagonist) thought she'd finally earned a proper holiday. She was wrong. The threat actors have returned — and this time they've set their sights on a new target. Assume the role of Alice as she hunts through rich, realistic datasets looking for evidence of the attackers, answering increasingly difficult questions and puzzles along the way. No spoilers — you'll have to register to find out more!

You'll have the chance to sharpen your Splunk skills, network with other security professionals across the APAC region, and maybe, just maybe, take home some awesome prizes.

Details

APAC BOTS Day 2026 will offer both in person and virtual attendance, and we will confirm locations in the coming weeks. As usual we're accepting teams of 1–4 players. If you're looking for teammates, head to our Slack server and look for the APAC BOTS 2026 channel — or reach out to your network on your favourite platform.

Make sure every player on your team registers individually, and join the Slack channel on the day for competition updates, hints, and direct access to coaches and admins. We will run the kickoff session and have coaches also available via Webex throughout the competition, so you'll never be far from help if you need it.

More Information

If you're looking to sharpen your Splunk skills before the big day, check out our blog series "Hunting with Splunk: The Basics" — inspired by the questions customers ask at BOTS events worldwide. You can also explore on-demand practice content on the BOTS portal.

Good luck, and Happy BOTS'ing!

Related Articles

What an Agentic Attack Looks Like in Splunk Attack Range
Security
10 Minute Read

What an Agentic Attack Looks Like in Splunk Attack Range

Explore how agentic swarm attacks are simulated in Splunk Attack Range. Rod Soto tests offensive agents against a custom defensive framework to improve security.
CISA’s Known Exploited Vulnerabilities Catalog and Splunk
Security
4 Minute Read

CISA’s Known Exploited Vulnerabilities Catalog and Splunk

Accompanying today’s announcement from CISA (BOD 22-01) and their new Known Exploited Vulnerabilities Catalog, SURGe and Splunk Threat Research Team (STRT) have coordinated to add functionality into Enterprise Security Content Updates (ESCU). This added functionality will help network defenders understand vulnerability context alongside relevant ESCU detections.
Playbook: Investigate IP Address Performing Reconnaissance Activity
Security
1 Minute Read

Playbook: Investigate IP Address Performing Reconnaissance Activity

Phantom can receive reconnaissance alerts and automate key investigation steps to increase efficiency and speed decision making.