Back to Main
When the Evidence Expires
Virtual Event
When the Evidence Expires
location
Online
date
November 18, 2026 2:00pm - 3:00pm EST1 hour
cpe CPE Credit Eligible
Register Now

Most cybersecuirty teams can search weeks of telemetry. Most intrutions take months to surface. 

That mismatch is the constraint behind a lot of failed threat hunts and incomplete incident investigations, and it exists in environments that are otherwise well-instrumented and well-staffed. The problem is architectural, not operational. 

Join OcientAIQ cybersecurity experts as they walk through the published research on dwell time and breach lifecycles, examine why current architectures produce the search windows they do and demonstrate long-horizon investigation across large-scale security datasets. The demonstration will show how a high-performance data layer sits alongside an existing SIEM rather than replacing it, so teams keep the detection and response tooling they have already built around.

During this webinar, attendees will learn: 

  • Where published dwell time and breach lifecycle data actually lands, and how that compares to the searchable history in a typical environment
  • What OMB M-26-14 requires in practical terms, and which of those requirements existing architectures struggle to meet
  • How storage and query economics drive retention decisions, and what changes when those economics change
  • What retrospective threat hunting looks like across a multi-year dataset, demonstrated live
  • How to add long-horizon search capacity without a SIEM migration

See how your team can extend searchable security history and uncover undetected threats.

CPE Credit
We are pleased to offer 1 continuing professional education (CPE) credit to attendees. For more information on the CPE credit we are offering, our CPE sponsor (NASBA) and the submission process, please visit the 'CPE Credit' tab above. 
Matt McCraith Photo
Matt McCraith
Principal Solutions Architect
Ocient National Security Solutions
Matthew McCraith is a technology and cybersecurity professional currently with Ocient, where he supports solutions focused on large-scale data processing and national security missions. He is a graduate of the United States Naval Academy and holds a Certified Information Systems Security Professional (CISSP) certification. His background includes experience in defensive cyber operations and a strong focus on applying advanced technology to mission-critical environments.
 
CPE Additional Information

CPE Additional Information

Max CPE Credits Available: 1 CPE Credit

Field of Study: Information Technology

Who Should Attend: This webinar is intended for cybersecurity professionals responsible for threat hunting, incident investigation and security data management. It is ideal for security architects and SOC leaders who need long-horizon search capabilities and extended security data retention while strengthening threat detection without replacing existing SIEM tools. No prior knowledge of Ocient is required. All others are welcome!


Attendance Requirements: In order to be awarded the full credit hour, you must be present, register your attendance by signing in with your full name and actively participate in polling questions throughout the entirety of the webinar. 

Program Level: Basic

Prerequisites: None

Advanced Preparation: None

Delivery Method: Group Internet Based

Event Cost: No fee

Refunds and Cancellations: There is no fee or cancellation policy associated with this event. For more information regarding refund, concern and/or program cancellation policies, please contact us at AIMarketing2@carahsoft.com.
 
Carahsoft is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education of the National Registry of CPE Sponsors. State boards of accountancy have final authority in the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.nasbaregistry.org.  

Register Now

Do you have a colleague who may like to attend this event?
Please include their name and email address and we will send them an invitation.