Build Real Skills. Earn Your Advantage.
SentinelOne University is back at OneCon26 with a full day of hands-on labs and workshops designed for practitioners who want more than a session recap. These are skill-building experiences built around real workflows, real platforms, and real outcomes. Come ready to work. Leave with a measurable advantage.
Earn ISC2 CPE Credits at OneCon.
Get Certified. Get Ahead.
Not theory. Not slides. Real skills you can apply the moment you get home. Each session is hands-on, instructor-led, and built to make you sharper, faster, and more effective in your role.

Workshops | Tuesday 9am – 12pm
AI-Driven Investigation: From Alert to Root Cause in Minutes
AI doesn't just accelerate investigations, it transforms them. Learn how the Singularity Platform correlates telemetry across multiple storylines, when to put AI in the driver's seat and when to keep a human in the loop, and how to build repeatable workflows that cut MTTR and elevate analyst performance.
Building and Optimizing Data Pipelines for AI SIEM
The quality of your AI is only as good as the data feeding it. This session dives into how to design and optimize data pipelines that normalize, enrich, and streamline high-volume data into AI SIEM, reducing noise and unlocking more powerful, accurate detections across your environment.
Adversarial AI: Thinking Like Attackers in the Age of AI
Attackers are using AI to evade, automate, and scale faster than most defenders realize. In this gamified, scenario-based session, you will think like an adversary, map attacker tactics to AI-driven defenses within SentinelOne, and walk away with sharper instincts and stronger proactive strategies.
Secure Your AI: Protecting Models, Data, and Usage at Scale
AI adoption expands your attack surface in ways traditional security wasn't built to handle. This session covers how to identify vulnerabilities across models, training data, prompts, and outputs, and how SentinelOne's capabilities help you enforce governance and protect AI applications across your organization.
Workshops | Tuesday 1 – 4pm
Unified Protection: Endpoint and Identity Defense
Endpoint and identity don't exist in silos, and your defense strategy shouldn't either. This session explores how SentinelOne's identity protection capabilities complement endpoint detection to deliver faster, more confident response decisions across your environment.
Hyperautomation in the SOC: From Alert Fatigue to Autonomous Response
Manual processes are a liability when speed matters most. Learn how to design and implement hyperautomation workflows using SentinelOne's suite of tools to eliminate repetitive tasks, orchestrate operations, and move toward fully autonomous security at scale.
Purple Team Lab: Simulate, Attack, Defend, Repeat
This is where training gets real. In this live-fire, gamified exercise you will simulate attacks, observe detections in real time, and refine your response strategies using SentinelOne. Built to sharpen instincts and build the kind of muscle memory that holds up under pressure.
The New SentinelOne Certification Program
SentinelOne is launching a brand new certification program, and this is your first look. Get the full certification roadmap, understand what is available now and what is coming, and map out your path forward. Whether you are just getting started or ready to validate your expertise, this session gives you the inside track straight from the source.

Earn ISC2 CPE Credits at OneCon
OneCon attendees are eligible to earn Continuing Professional Education (CPE) credits through ISC2 by participating in conference sessions. Each hour of qualifying content counts for one (1) CPE credit, with 10+ hours of educational programming available throughout the event.
Simply attend sessions and we’ll take care of the rest — CPE credits will be tracked and submitted on your behalf following the conference. Credits will appear directly in your ISC2 account within 60 days post-event; you will not receive a separate notification from ISC2. For any additional questions, please reach out to onecon@sentinelone.com.
Join Us for OneCon 2026
Don’t miss the premiere event of the year for SentinelOne customers


