Ninth EU MITRE ATT&CK® Community Workshop 2 June 2022
The ninth EU ATT&CK Community Workshop will take place on 2 June 2022 from 10am CET until 5pm. We will organize this event in hybrid format, with space for some 200 attendees in a conference room in Brussels and the other attendees joining virtually. Physical attendance registration is closed now.
Agenda
02-Jun | ||||
---|---|---|---|---|
Time CEST | Ttile | First name | Last name | Organisation |
10.00 | Opening and welcome (Freddy) | |||
10.15 | Statistical mapping of malicious events seen by CERT-EU to ATT&CK | George | Koutepas | CERT-EU |
10.30 | Improving MISP workflow with ATT&CK | Alexandre | Dulaunoy | CIRCL |
10:45 | Using ATT&CK to prioritise defences | Joris | Pinoy | EUROCLEAR |
11.00 | The use of ATT&CK to defend against destructive cyber attacks | Andrii | Bezverkhyi | SOCPRIME |
11.15 | Defense and Detection in Depth using MITRE ATT&CK, MITRE D3FEND, and NIST SP 800-53 | Kevin | Gomez Buquerin | AUDI |
11.30 | An adversarial viewpoint to identify High Value Targets to increase Cyber Resilience | Francesco | Chiarini | STANDARD CHARTERED |
Calin | Gheorghiu | STANDARD CHARTERED | ||
11.45 | Leveraging MITRE mitigations for cyber posture analysis | Craig | Roberts | NOETIC |
12.00 | Emulation of a Nation State Attacker | Agostino | Panico | BSidesRoma |
12.15 | Auditd for the newly threatened | Tim | Brown | CISCO |
12.30 | Break for lunch - | |||
13.30 | State of ATT&CK | Jamie | Williams | MITRE |
Casey | Knerr | MITRE | ||
14:00 | Top ATT&CK Techniques | Ingrid | Skoog | ENGENUITY |
14:15 | CTID Attack Flow | Steve | Luke | ENGENUITY |
14.30 | pySigma: Project Structure & Contribution | Thomas | Patzke | |
14.45 | ATT&CK enrichment in Sigma Splunk Backend | Patrick | Bareiss | SPLUNK |
15.00 | Break for coffee - | |||
15.30 | Detection mapping, how does your coverage compare to ATT&CK? | Olaf | Hartong | FalconForce |
15.45 | Kickstarting your DFIR capability in AWS in 24h | Teodor | Cimpoesu | EC DIGIT CSIRC |
16.00 | Kubernetes Untapped: monitor pod network traffic to detect security threats | Vijit | Nair | CORELIGHT |
Stan | Kiefer | CORELIGHT | ||
16.15 | Managing Cloud Adoption with Security Stack Mappings | Jose | Barajas | ATTACKIQ |
16.30 | Using Natural Language Processing to identify TTPs | Sven | Niedner | SYNAMIC |
16:45 | Tidal Community Edition: Making Threat-Informed Defense Easier for All | Rich | Struse | TIDAL |
Participation to this event is at no cost, but registration is required on the following link (EU Commission registration system): Registration for the ninth EU ATT&CK workshop. The event will not be recorded.
The workshop is hosted by CERT-EU and supported by CIRCL and the MITRE Engenuity Center for Threat-Informed Defense. It is organized by practitioners and for practitioners with an interest in the use of the MITRE ATT&CK® Framework in Prevention, Detection/Hunting and Response.
About the EU ATT&CK Community
The EU ATT&CK Community is a diverse community of practitioners including security professionals, cybersecurity vendors, CSIRTs/CERTs and user organisations whose aim is to actively use MITRE ATT&CK® while contributing back to improve cyber defense. The EU MITRE ATT&CK® Community is a volunteer-driven vendor neutral platform where all users can discuss, exchange and improve their use of adversary tactics and techniques together in practical use cases like attribution, prevention, detection, hunting and response.
Contact
If you want to get in touch with us, you can reach us via email contact@freddydezeure.eu and info@attack-community.org . You can also join the mailing list by sending a request to info@attack-community.org .