Defensive blue team members are often seen as the “Walmart Greeters” of information security. Tiring of this view and the constant barrage of yet another red team “i totally pwned your network” presentation, @jeremynielson pulls together real-life stories about catching penetration testers on his network, some ideas on how to respond, and provides details on how your security operations center can do the same. Practical examples and humorous anecdotes will be presented. Happy hunting!