The free monthly threat intelligence livestream series returns at 1:00 p.m. ET on SANS DFIR YouTube, X, and LinkedIn, featuring practitioner-led analysis from across the security community.Bethesda, MD, May 13, 2026 (GLOBE NEWSWIRE) -- The window between a vulnerability being disclosed and someone explaining what to do about it has gotten shorter every year. Cyber Threat Intelligence (CTI) teams have access to more reports, feeds, and vendor advisories than ever, yet have less time to analyze them before decisions must be made. <a href="https://www.globenewswire.com/Tracker?data=A4gqF1zbIXOgqa59rAUMyzALCBNIxFL9ckkxu9TAcezWYn_81OZYIaF3Hw7NOKkf2OFi-eNhs9HlMPvfUJIYXZfAb33Yu_0L2U7NH9ocyNw=" rel="nofollow" target="_blank" title="SANS Institute’s">SANS Institute’s</a> monthly <a href="https://www.globenewswire.com/Tracker?data=V2boXn6bnheMCg0K18NRMdJBjdxQp4vVf7QxvO6tzqz4f76posHdQ8SPM3aIL26R_soFMBs_vNxoC05QHyP6GcPyPXLSWcj3sf6VlMJvlsHo43EN2j4zQp2WOOKD5RqrSUZlYYC_3iwbm2zJy1PJ5g==" rel="nofollow" target="_blank" title="STAR (SANS Threat Analysis Rundown) Livestream">STAR (SANS Threat Analysis Rundown) Livestream</a> is built for that gap, and after a year-long hiatus, it returns May 21 at 1:00 p.m. ET with <a href="https://www.globenewswire.com/Tracker?data=X_j0Fo8Lf-hB4QwlRCx9zi-9AEHgtTe_g1JMncQWDe_ei3Y2F3VdNOrWRZXMKPAmBB6cIPrg6Q5-ALODbJNpHW7uVFzKJjXw4Jje71gZyCk9ivwlPldOI3xjjqGb5es9" rel="nofollow" target="_blank" title="Sean O’Connor">Sean O’Connor</a> as the new host.   Episodes will stream live monthly on SANS DFIR YouTube, X, and LinkedIn, with recordings available on demand. Each episode is followed by a blog recap with key insights and resources.  Unlike vendor-led briefings or high-level industry commentary, STAR pulls in voices from across the threat intelligence community for working-level analysis of emerging adversary activity. Past episodes have featured Will Thomas of Curated Intelligence on the Ragnar Locker takedown, the Splunk team on the PEAK threat hunting framework and Datadog’s Zack Allen on detection engineering and threat actor naming conventions. Future episodes will continue to explore current threat topics in depth, examining adversary activity, malware, and emerging trends with a focus on their impact on real-world security operations. Under Sean O’Connor’s leadership, the series brings a renewed focus on emerging threats and evolving adversary behavior.  “The goal of STAR is not to recap every headline or repeat what is already in everyone’s inbox,” said O’Connor. “Security teams are already buried in data. What they need is context: what changed, why it matters and what they can actually do with it. I want these conversations to be useful for the people writing detections, briefing leadership, prioritizing hunts, and making decisions under pressure.”  O’Connor’s career spans military intelligence, digital forensics, and threat analysis across the public and private sectors. At Secureworks, he built a virtual HUMINT team focused on infiltrating dark web cybercriminal networks, giving him direct insight into adversary operations. He has also led threat intelligence programs in enterprise environments, bringing a tactical perspective to modern cyber defense. He led the CTI-League’s darknet intelligence team, part of the broader CTI-League organization named a 2020 SANS Difference Maker. He also chairs the IT-ISAC Data Center Special Interest Group.  The STAR debut episode features a handoff conversation with former host <a href="https://www.globenewswire.com/Tracker?data=9JN2cKLdmumnxCNF5FHM3YvLJCB6XYjkNVz1ZgEjZHr6j3f80qAjKSJ_rehg1OChmc2j8vWRb3t_PhJsciW3ucRNZZuIgWyi_KM2Ptbi3oS5-fllwM_rYK1YXgcNmttj" rel="nofollow" target="_blank" title="Katie Nickels">Katie Nickels</a>, joined by CTI specialists <a href="https://www.globenewswire.com/Tracker?data=k4wwF1AahYh2_5kmviis2HNsrRTisiBNHuIpmMH1HtRBRWw1et8ihN8t3Sv60RSmvgCjM5Ki4viCS2zQtQa_6MkOEiJ9bUiKiTphL6o0bWLxdJ_I7vzqk9U3jhX_wbEF" rel="nofollow" target="_blank" title="Rebekah Brown">Rebekah Brown</a> and <a href="https://www.globenewswire.com/Tracker?data=br1sC_M4OtEGd3XUReX4S3A0-APAZH1jGK0Xl14KX6NR2ixB6JXFWaDy06f-XXZ5ZqdixUM0HchS5ERFzG_iYe1l_s8I8TtmDxnfh9FQHPM=" rel="nofollow" target="_blank" title="John Doyle">John Doyle</a>.  To explore past episodes, blog recaps, and additional resources, visit <a href="https://www.globenewswire.com/Tracker?data=BlTCNe63K20wjl8CgF35Kw_8mRYujnhtu8B0CP2zHbYU8oE-3gt4mKzfABS2mkTT7cW6usIoqgf6QDEt_QTFTAEQGb1f608p340Jn9w25cTG7H1AJvLRwfFyTTMGBN-M6rCeGutfwdskK6PpamNytw==" rel="nofollow" target="_blank" title="">https://www.sans.org/mlp/star-webcast</a>.  To attend the May 21 debut episode on your preferred platform:  LinkedIn: <a href="https://www.globenewswire.com/Tracker?data=BlTCNe63K20wjl8CgF35K-tNkIVxQmsDyx1rFfaMw3XOxxmVjYmPtaDSYeC00uHVyzENbqbjObHT9zQstZ_LcsSfL7weZxKvl32AT-XMBeYA1SvG-lN6mBHFVwtxyU1WkQ6ba5yQGDiUi9BUuVv4EgCWySHPLB0KOAf2fQjKQm1YpG6NSztrTZJW-8Chk-YZ" rel="nofollow" target="_blank" title="">https://www.linkedin.com/events/7438173815626641409/</a>  YouTube: <a href="https://www.globenewswire.com/Tracker?data=BlTCNe63K20wjl8CgF35K3_u4E_o_T7EyqH4KhwYPc0LKhrd_00KUFNQqwtDqy6SAEvQvY7JWLil2ruSgWa4UxnFMqtCVT524R4QkEEGzM3dQWE9qGh00X1u8rCZiM1qYMobHkezwUpZz8MdXm-vDaiNsJooVDAGaYclVVUldN4=" rel="nofollow" target="_blank" title="">https://www.youtube.com/watch?v=QLVsn9cSDTs</a>  <pre>CONTACT: Jenn Elston
SANS Institute
301-654-7267
jelston@sans.org
</pre> <img alt="" src='https://ml.globenewswire.com/media/Y2JmZjM1YTMtNjg4YS00YTQ1LWJiOWEtYjc0ZDQzYzk1NDc3LTUwMDEzMjY5OS0yMDI2LTA1LTEzLWVu/tiny/SANS-Institute.png' referrerpolicy='no-referrer-when-downgrade' />

GlobeNewswire Inc.

Threat Intelligence Veteran Sean O’Connor to Host SANS STAR Livestream, Returning May 21

Latest news from the world of business and finance – both local and global

MONEY FM 89.3 is Singapore's first and only Business and Personal Finance station, featuring local and international business and financial news.

MONEY FM 89.3

Discover newsletters from our DJs on LinkedIn