Version 0.56 Oct. 24, 2024

We released a new schedule version!

We have a new session: “Lucky leaks: 400+ mln files are worth a thousand words” by Lorenzo Nicolodi.

We sadly had to cancel a session: “TODDLERSHARK: Kimsuky's Hastily Built Variant of BABYSHARK Deployed Using an 1-Day Exploit” by George Glass

Version 0.55 Oct. 22, 2024

fixes

Version 0.54 Oct. 22, 2024

We released a new schedule version!

We have a new session: “It Has Been [0] Days Since the Last Edge-Device Security Incident” by Rascagneres.

Version 0.53 Oct. 22, 2024

We released a new schedule version!

We have a new session: “Sharing IoC - Wrong Answers Only” by Deborah Servili.

Version 0.52 Oct. 22, 2024

We released a new schedule version!

We have new sessions!

• “Unlocking BEAM's Pandora's Box: Security Pitfalls in Distributed Erlang and Elixir Systems”
• “A New (free) Internet Listener in Town” by Mathieu LE CLEACH
• “Any sufficiently advanced technology is indistinguishable from 01 January 1970” by Trey Darley
• “How much time we had for IPv6 preparation?” by Nicol Dankova

Version 0.51 Oct. 19, 2024

We released a new schedule version!

We have new sessions!

• “Using LLM locally” by Pauline Bourmeau (Cookie)
• “Future of websites without DDoS” by Lukáš Kršek
• “Learn anything - reload” by Pauline Bourmeau (Cookie)
• “Running circles around threat actor tooling using Javascript data visualisation” by Chris Horsley
• “Flowintel - flow your management” by Cruciani David

Version 0.50 Oct. 19, 2024

We released a new schedule version!

We have new sessions!

• “Hacking EV Charging Points, for fun... and fixing the firmware” by Simon Petitjean
• “How I Learned to Stop Worrying and Love the NLF” by fukami

We have moved a session around: “Pentests using LLMs” by Al Mochkin (Oct. 22, 2024, 1:45 p.m. → Oct. 25, 2024, 1:40 p.m.)

Version 0.49 Oct. 18, 2024

We released a new schedule version!

Version 0.48 Oct. 18, 2024

We released a new schedule version!

We have new sessions!

• “Cyrus - The story of no cloud” by Guillaume Ginis
• “Latest Updates on Kunai” by Quentin JEROME
• “Running Exercises with SkillAegis” by Sami Mokaddem
• “Vulnerability Lookup” by Cédric Bonhomme
• “Catching Phish Using Publicly Accessible Information” by Aurimas Rudinskis
• “Luks Full Disk Encryption Upside-Down” by Michael Hamm
• “Pentests using LLMs” by Al Mochkin

Version 0.47 Oct. 17, 2024

We released a new schedule version!

We have new sessions!

• “Introducing the ACTOR Model: Adversary Simulation is dead, long live Adversary Simulation!” by Tristan MADANI
• “Phantom DLL Hijacking in Powershell.exe (aka Backdooring Powershell for Fun and Profit)” by Tristan MADANI

Version 0.46 Oct. 17, 2024

We released a new schedule version!

We have new sessions!

• “Analysis and Forecasting of Exploits with AI” by Roman Graf
• “QKD - is it worth it?” by Mihai Carabas
• “AIL Project: Secrets in Squares - QR Codes” by Aurelien Thirion

Version 0.45 Oct. 17, 2024

We released a new schedule version!

We have new sessions!

• “MISP playbooks, Proving the Value of Cyber Threat Intelligence and ICS-CSIRT.io” by Koen Van Impe
• “A quick monologue on global inefficiency” by Claus Cramon Houmann

Version 0.44 Oct. 17, 2024

We released a new schedule version!

Version 0.43 Oct. 16, 2024

We released a new schedule version!

We have a new session: “Integrating New Tools in Your Workflows Within Minutes in MISP” by Sami Mokaddem.

Version 0.42 Oct. 15, 2024

We released a new schedule version!

Version 0.41 Oct. 14, 2024

We released a new schedule version!

Version 0.40 Oct. 14, 2024

We released a new schedule version!

We sadly had to cancel a session: “Revolutionizing IoC Sharing: MISP, ZMQ and the Power of Smart Workflows & Taxonomies” by Mike

Version 0.39 Oct. 14, 2024

We released a new schedule version!

Version 0.38 Oct. 9, 2024

We released a new schedule version!

Version 0.37 Oct. 9, 2024

We released a new schedule version!

Version 0.36 Oct. 3, 2024

We released a new schedule version!

Version 0.35 Oct. 2, 2024

We released a new schedule version!

We have a new session: “Zeek and Destroy with Python and Machine Learning Workshop (Part 1/2)” by Eva Szilagyi, David Szili.

We sadly had to cancel a session: “Zeek and Destroy with Python and Machine Learning Workshop (Part 2/2)” by Eva Szilagyi, David Szili

Version 0.34 Oct. 2, 2024

We released a new schedule version!

We have a new session: “Zeek and Destroy with Python and Machine Learning Workshop (Part 2/2)” by Eva Szilagyi, David Szili.

We have moved a session around: “Zeek and Destroy with Python and Machine Learning Workshop (Part 2/2)” by Eva Szilagyi, David Szili (Oct. 22, 2024, 10:15 a.m., Schengen 1 & 2 → Oct. 25, 2024, 2 p.m., Vianden & Wiltz).

Version 0.33 Oct. 1, 2024

We released a new schedule version!

We have moved a session around: “Lookyloo, Pandora, and all the bells and whistles to go with them.” by Raphaël Vinot (Hollenfels → Echternach & Diekirch)

Version 0.32 Sept. 26, 2024

We released a new schedule version!

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “The Heist: get your hands on the goods!” by Stijn Tomme, Dominiek Madou (Oct. 22, 2024, 2 p.m. → Oct. 23, 2024, 10:15 a.m.)
• “The Heist: get your hands on the goods!” by Stijn Tomme, Dominiek Madou (Oct. 22, 2024, 4:15 p.m. → Oct. 24, 2024, 10:15 a.m.)

Version 0.31 Sept. 26, 2024

We released a new schedule version after fixing the timezone setting.

Version 0.30 Sept. 24, 2024

We released a new schedule version!

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “The Ouroboros of Cybercrime: Witnessing Threat Actors go from Pwn to Pwn'd” by Estelle, Stuart Beck (Oct. 22, 2024, 2:30 p.m. → Oct. 25, 2024, 9 a.m.)
• “Automating Dark Web CTI Reports ​ with RAG Insight for MISP Sharing” by Shing-Li Hung (Oct. 22, 2024, 1:30 p.m. → Oct. 22, 2024, 2:30 p.m.)

Version 0.29 Sept. 24, 2024

We released a new schedule version!

We have a new session: “Predictive Analytics for Adversary Techniques in the MITRE ATT&CK Framework using Rule Mining” by Tristan MADANI.

Version 0.28 Sept. 23, 2024

We released a new schedule version!

We have a new session: “Spicy — Generating Robust Parsers for Protocols & File Formats” by Benjamin Bannier.

We sadly had to cancel a session: “How to detect malicious servers by unleashing the power of TLS fingerprint” by Creed

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “XOR Cryptanalysis” by Didier Stevens (Oct. 23, 2024, 10:15 a.m., Hollenfels → Oct. 25, 2024, 10:15 a.m., Schengen 1 & 2)
• “Artemis: how CERT PL improves the security of the Polish internet” by Krzysztof Zając (Oct. 23, 2024, 3:30 p.m. → Oct. 23, 2024, 3 p.m.)
• “Scam as a Service powered by Telegram” by Aurimas Rudinskis (Oct. 25, 2024, 10:15 a.m. → Oct. 24, 2024, 10:45 a.m.)
• “New features in the Zeek Network Monitor” by Christian Kreibich (Oct. 25, 2024, 11:15 a.m. → Oct. 25, 2024, 10:15 a.m.)

Version 0.27 Sept. 23, 2024

We released a new schedule version!

We have a new session: “Back to the failure - Did your physical security really evolve in the last 40 years?” by Simon Geusebroek.

Version 0.26 Sept. 22, 2024

We released a new schedule version!

We have a new session: “NeuroCTI - a custom LLM for CTI - benchmarking, successes, failures and lessons learned (updates)” by Aaron Kaplan.

Version 0.25 Sept. 21, 2024

We released a new schedule version!

Version 0.24 Sept. 20, 2024

We released a new schedule version!

Version 0.23 Sept. 19, 2024

We released a new schedule version!

We have a new session: “Cyber Threats to Advanced Intelligent Connected Vehicle Systems” by Shihao Xue, Yuqiao Ning.

We have moved a session around: “APT28: Following bear tracks back to the cave” by Golo (Oct. 23, 2024, 5:15 p.m. → Oct. 23, 2024, 5:45 p.m.)

Version 0.22 Sept. 16, 2024

We released a new schedule version!

Version 0.21 Sept. 16, 2024

We released a new schedule version!

We have a new session: “Decoding Galah: an LLM powered web honeypot” by Adel Karimi.

Version 0.20 Sept. 11, 2024

We released a new schedule version!

We have a new session: “TODDLERSHARK: Kimsuky's Hastily Built Variant of BABYSHARK Deployed Using an 1-Day Exploit” by George Glass.

Version 0.19 Sept. 11, 2024

We released a new schedule version!

We have a new session: “Disconnecting games with a single packet: an Unreal untold story” by Hugo Bertin.

Version 0.18 Sept. 10, 2024

We released a new schedule version!

We have a new session: “The good, the bad, and the ugly: Microsoft Copilot” by Inbar Raz.

Version 0.17 Sept. 10, 2024

We released a new schedule version!

Version 0.16 Sept. 10, 2024

We released a new schedule version!

Version 0.15 Sept. 10, 2024

We released a new schedule version!

We have new sessions!

• “APT28: Following bear tracks back to the cave” by Golo
• “Hands-on Kubernetes security with KubeHound (purple teaming)” by Julien
• “Hands-on Kubernetes security with KubeHound (purple teaming)” by Julien
• “KubeHound: Identifying attack paths in Kubernetes clusters at scale with no hustle” by Julien

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “How to detect malicious servers by unleashing the power of TLS fingerprint” by Creed (Oct. 23, 2024, 10:45 a.m. → Oct. 23, 2024, 3 p.m.)
• “You just got a CTI program funded - now what?” by Lukas Vytautas Dagilis (Oct. 23, 2024, 3 p.m. → Oct. 22, 2024, 3:30 p.m.)

Version 0.14 Sept. 10, 2024

We released a new schedule version!

We have new sessions!

• “Malware Development and Persistence” by cocomelonc
• “Malware and Hunting for Persistence: How Adversaries Exploit Your Windows?” by cocomelonc

Version 0.13 Sept. 10, 2024

We released a new schedule version!

We have a new session: “From protocol analysis to actionable algorithmic and signature detection with Suricata” by Eric Leblond, Peter Manev.

Version 0.12 Sept. 10, 2024

We released a new schedule version!

We have a new session: “DFIQ - Codifying digital forensic intelligence” by Thomas Chopitea.

We have moved a session around: “From 0 to millions: Protecting against AitM phishing at scale” by Jacob Torrey (Oct. 23, 2024, 5:15 p.m. → Oct. 24, 2024, 11:15 a.m.)

Version 0.11 Sept. 9, 2024

We released a new schedule version!

We have new sessions!

• “How to detect malicious servers by unleashing the power of TLS fingerprint” by Creed
• “From 0 to millions: Protecting against AitM phishing at scale” by Jacob Torrey

Version 0.10 Sept. 9, 2024

We released a new schedule version!

We have new sessions!

• “Unleashing the power of purple teaming with OpenTIDE” by Remi Seguy, Amine Besson
• “ROP on ARM64 - a hands-on tutorial” by Saumil Shah

Version 0.9 Sept. 9, 2024

We released a new schedule version!

We have new sessions!

• “Artemis: how CERT PL improves the security of the Polish internet” by Krzysztof Zając
• “Scanning with the Artemis security scanner” by Krzysztof Zając

We had to move some sessions, so if you were planning on seeing them, check their new dates or locations:

• “Automating Dark Web CTI Reports ​ with RAG Insight for MISP Sharing” by Shing-Li Hung (Oct. 22, 2024, 11:30 a.m. → Oct. 22, 2024, 1:30 p.m.)
• “Operationalization of Sigma Rules with Processing Pipelines” by Thomas Patzke (Schengen 1 & 2 → Vianden & Wiltz)
• “Lessons Learned from (almost) 8 Years of Sigma Development” by Thomas Patzke (Oct. 23, 2024, 3:30 p.m. → Oct. 22, 2024, 11:30 a.m.)

Version 0.8 Sept. 9, 2024

We released a new schedule version!

Version 0.7 Sept. 9, 2024

We released a new schedule version!

We have a new session: “The Web of cognitive warfare” by Jindrich Karasek.

Version 0.6 Sept. 9, 2024

We released a new schedule version!

Version 0.5 Sept. 8, 2024

We released a new schedule version!

We have new sessions!

• “Operationalization of Sigma Rules with Processing Pipelines” by Thomas Patzke
• “Lessons Learned from (almost) 8 Years of Sigma Development” by Thomas Patzke

Version 0.4 Sept. 7, 2024

We released a new schedule version!

We have a new session: “New features in the Zeek Network Monitor” by Christian Kreibich.

We sadly had to cancel a session: “Nebula - 3 years of kicking *aaS and taking usernames” by Bleon Proko

Version 0.3 Sept. 6, 2024

We released a new schedule version!

Version 0.2 Sept. 6, 2024

We released a new schedule version!

We have new sessions!

• “Reverse engineering Android apps with ACVTool” by Aleksandr Pilgun
• “Detection And Response for Linux without EDR” by Hilko Bengen
• “Tales of the Future Past” by Saâd Kadhi
• “Nebula - 3 years of kicking *aaS and taking usernames” by Bleon Proko
• “The Gist of Hundreds of Incident Response Cases” by Stephan Berger
• “MISP Kickstart” by Shanna Daly, James Garratt
• “Insights from Modern Botnets” by Miguel
• “Zeek and Destroy with Python and Machine Learning Workshop (Part 2/2)” by Eva Szilagyi, David Szili
• “Lookyloo, Pandora, and all the bells and whistles to go with them.” by Raphaël Vinot
• “Internal Domain Name Collision 2.0” by Philippe Caturegli
• “Understanding file type identifiers” by Ange Albertini
• “SQL Injection Isn't Dead: Smuggling Queries at the Protocol Level” by Paul Gerste
• “In-Depth Study of Linux Rootkits: Evolution, Detection, and Defense” by Stephan Berger

Version 0.1 Sept. 5, 2024

We released our first schedule!