James Francis-Love

From Phish to Blocklist: Real-Time IOC Extraction with Any.Run

Room: Pomelo/Mandarin
Time: 11:00 AM – 11:45 AM
Length: 45 Minutes

About the talk

A live blue-team workflow that runs from a phishing email to sandbox detonation to IOC extraction and immediate blocking. Real-world defensive operations aimed at analysts.

About James Francis-Love

A security veteran with 30+ years of experience, James has evolved from executive protection for global leaders to managing critical infrastructure for a major Texas county. Leading a six-person cyber team, he specializes in bridging the gap between physical risk and digital defense. Known for an insightful, engaging style, he teaches organizations how to move past outdated threat feeds and implement real-time, actionable defense using modern sandboxing tools.