Skip to main content
Arpan Raval

Arpan Raval

Senior Manager
Optiv
Arpan is a Principal Threat Hunter at Optiv, where he leads global threat hunting efforts delivering tailored MDR services across diverse client environments, tool stacks, and SIEM platforms. With nearly a decade of experience spanning threat hunting, detection engineering, SOC operations, and cyber threat intelligence, he brings a practitioner’s perspective rooted in real-world adversary behaviors. Previously, Arpan served on Microsoft’s Defender Experts (DEX) global threat hunting team, hunting advanced threats across Microsoft’s global customer base at scale.

Speaker sessions

Briefings and Arsenals | Confirmed Speakers | No Session Assigned

Placeholder session for confirmed speakers without an assigned session, allowing them to be pushed to Swapcard and Visit.

  • 07:30
  • Tue
  • 01 Dec
Stage: Briefing Stage 2
Sessions Type: Keynote

Optimus Detection Engineering Studio

Optimus Detection Studio is an open-source detection intelligence platform: a dedicated, end-to-end workbench for detection engineering. Detection content is no longer the problem; thousands of tested rules are freely shared by the community and vendors every day. What teams lack is everything after the download: a single source of truth across SIEM, XDR, and EDR consoles, real answers about coverage, and a managed lifecycle. Optimus imports vendor content (SigmaHQ, Splunk ESCU, Elastic, Chronicle) and pulls rules already deployed in your SIEM into one normalized library, maps everything to the full MITRE ATT&CK knowledge graph (20,000+ relationships), and lets you ask natural-language questions like what is our coverage against ransomware? with answers drawn from your own library in minutes. AI autofill completes full detection documentation including investigation SOPs, a daily intel digest checks emerging threats against your coverage, and an autonomous multi-agent pipeline turns a threat topic into QA-reviewed draft detections. Deploy to six SIEM/XDR platforms with drift tracking. Fully self-hosted.
  • 13:00
  • Tue
  • 01 Dec
Stage: Arsenal 3
Sessions Type: Keynote