
AI Security Lab: Investigate a Day of Shadow AI and an Attack in Progress
Investigate one workday of AI activity across five employees: approved AI, shadow AI not approved by IT, and an attack targeting an employee who doesn't know it.
Hosted by Harborcoat with CrowdStrike. You'll use Falcon Guardian as the lab platform to discover activity, investigate its context, and explore the controls that would catch it.
What you’ll investigate
5 employees
of AI activity
Approved AI use
Some employee AI activity is approved.
Shadow AI
Some employee AI activity is not approved by IT.
An employee under attack
One employee is targeted by an attacker without knowing it.
Your taskDiscover the activity, investigate its context, and explore runtime controls.
- Date
- Wednesday, November 18, 2026
- Time
- 11 AM–12:30 PM Mountain / 10–11:30 AM Pacific / 18:00–19:30 UTC
- Format
- Zoom · hands-on · 90 minutes
90 minutes, including introductions and Q&A. Hosted by Harborcoat with CrowdStrike.
Review AI activity from five employees
Work through a day of employee AI activity and investigate behavior in context, from the prompt to its runtime impact.
Hover, focus, or tap an employee to explore an AI interaction.
Drafting a project update
Example prompt
“Help me outline an internal project update.”
- AI use
- An AI assistant helps prepare a draft.
- Context to review
- The tool being used and the information included in the prompt.
Question to investigateIs the tool approved for the data in this interaction?
- 01
Discover
Find AI activity and understand where it is happening.
- 02
Investigate
Follow behavior with context, from the prompt to its runtime impact.
- 03
Govern
Explore the visibility and controls that would catch the activity in this scenario.
AI lab registration
Register for the hands-on AI Security Lab, hosted by Harborcoat with CrowdStrike.
Before the workshop
- How long should I set aside?
- Set aside 90 minutes. The hands-on workshop takes about an hour, with time for introductions and Q&A.
- Where will the workshop take place?
- CrowdStrike will host the workshop on Zoom. Your meeting invitation will include attendee access instructions.
- How will I access the lab?
- Lab access will be provided during the Zoom webinar. The presenter will walk attendees through the login instructions.