Twelfth EU MITRE ATT&CK® Community Workshop 17 May 2024
The twelfth EU ATT&CK Community Workshop will take place on 17 May 2024 from 9am CET until 6pm. We will organize this event in hybrid format, with space for some 300 attendees in a conference room in Brussels and the other attendees joining virtually. The workshop is hosted by the Centre for Cybersecurity Belgium and supported by the MITRE Engenuity Center for Threat-Informed Defense.
It is organized by practitioners and for practitioners with an interest in the use of the MITRE ATT&CK® Framework in Prevention, Detection/Hunting and Response. You will hear updates from MITRE and from the developers of systems and tools supporting the ATT&CK® Framework. But even more importantly, you will learn best practices from your peers in the user community.
Draft Agenda
Time CEST | Ttile | First name | Last name | Organisation |
9.30 | Opening and welcome | Miguel | De Bruycker | CCB |
9.30 | Enhancing Cybersecurity with MITRE ATT&CK and CyberFundamentals | Kevin | Holvoet | CCB |
9.45 | The Always-On Purple Team: An Automated CI/CD for Detection Engineering | Erik | Van Buggenhout | NVISO |
10.00 | Threat-Led Attack Emulation: Holistic & Efficient Adoption of Threat-Informed Defense | Kennedy | Torkura | Mitigant |
10.15 | Purple Teaming Automation | Rajendra | Mekhale | ItsMe |
10:30 | TotalTest – An Integrated Approach to Conducting Attack Simulation | Nebu | Varghese | FTI Consulting |
10.45 | Threat-Informed Defense: Transforming Intelligence into Countermeasures | Grzegorz | Molski | Standard Chartered |
Wojciech | Lesicki | Standard Chartered | ||
11.00 | Coffee | |||
11.30 | GenAI for Threat-Informed Defense - GenAI as Buddy for TID Research & Development | Ryusuke | Masuoka | Fujitsu |
11.45 | Chat with your CTI | Dhia | Mahjoub | Independent researcher |
12.00 | The rationale for Cyber Risk Quantification | Robert | Kloots | Trust Matters |
12.15 | Digital Maintenance for Rail: A MITRE ATT&CK Handbook for Today (and Tomorrow) | Emma | Taylor | RazorSecure |
12.30 | Break for lunch - | |||
13.30 | State of ATT&CK | Casey | Knerr | MITRE |
14.00 | Center for Threat-Informed Defense R&D Update | Tiffany | Bergeron | ENGENUITY |
14.15 | Introduction of Sigma Correlations | Thomas | Patzke | Evonik |
14.30 | SigmAIQ: Bridging Advanced LLM Support with Sigma Rules for Next-Gen Cyber Defense | Stephen | Lincoln | AttackIQ |
14.45 | TRAM LLM for ATT&CK | Andrii | Bezverkhyi | SOC Prime |
Alla | Iurchenko | SOC Prime | ||
15.00 | Break for coffee | |||
15.30 | A Look Outside the Window(s): CTI Spotlight on Less-Prominent ATT&CK Techniques | Scott | Small | TIDAL |
15.45 | Operationalizing Threat Intelligence to ATT&CK your Adversaries | Hanna | Holych | SSSCIP |
16.00 | A CISO story: educating students on MITRE ATT&CK in Ukraine, with CERT-UA | Volodymyr | Garashchenko | SOC Prime |
Denys | Yashchuk | CERT-UA | ||
16.15 | Matching the Attack - Growth in use of QR Codes | Dave | Ross | Intel471 |
16.30 | Cost effective requirements allocation with MITRE ATT&CK | Olivier | de Visscher | Expleo |
Thomas | Jahan | Expleo | ||
16.45 | Standardising Threat Matrices: the good, the bad, the … | Christophe | Vandeplas | nexturia / MISP Project |
17.00 | Leveraging MITRE ATT&CK to Develop the MISP Galaxy Standard: Building a Robust Interconnected Knowledge Base | Alexandre | Dulaunoy | CIRCL |
17.15 | Honeypots and how to use them with ATT&CK | Victor | Curalea | European Commission |
17.30 | Closing comments | Freddy |
Participation to this event is at no cost for the participants, but registration is required on the following link: Registration for the twelfth EU MITRE ATT&CK workshop.
We insist that you provide your real name, professional affiliation and a corporate email address in your registration.
About the EU ATT&CK Community
The EU ATT&CK Community is a diverse community of practitioners including security professionals, cybersecurity vendors, CSIRTs/CERTs and user organisations whose aim is to actively use MITRE ATT&CK® while contributing back to improve cyber defense. The EU MITRE ATT&CK® Community is a volunteer-driven vendor neutral platform where all users can discuss, exchange and improve their use of adversary tactics and techniques together in practical use cases like attribution, prevention, detection, hunting and response.
Contact
If you want to get in touch with us or if you want to join the mailing list, you can reach us via email info@attack-community.org.