The FIRST Technical Colloquium (TC) event will be held in 2-3 April 2013 at the Cisco Campus, Amsterdam. April 1st is reserved for committee meetings attendance by invitation.
Please note: the program schedule is not final, please keep checking for updates.
April 1st (Monday)
Committee Meetings (by invitation)
Technical Colloquium (Tuesday)
Technical Colloquium (Wednesday)

| Technical Colloquium (Tuesday) | |
|---|---|
| 08:00 – 09:00 |
Registration |
| 09:00 – 09:15 |
Welcome Gavin Reid (Cisco Systems) |
| 09:15 – 10:15 |
Overview of Cuckoo Sandbox Claudio, ShadowServer |
| 10:15 – 11:00 |
CVSS v3 Preview Seth Hanford (Cisco) |
| 11:00 – 11:15 |
Networking and Coffee Break |
| 11:15 – 12:30 |
RPZ I Paul Vixie (Internet Systems Consortium) |
| 12:30 – 13:30 |
Lunch |
| 13:30 – 14:30 |
RPZ II April Lorenzen (Dissect Cyber, Inc) |
| 14:30 – 15:15 |
![]() Pre-Recursor Passive DNS Logging Henry Stern (Cisco, CA) |
| 15:15 – 16:15 |
Networking and Coffee Break |
| 16:15 – 17:00 |
![]() ProcDOT Visual Malware Analysis Christian Wojner (CERT.at, AT) |
| 17:00 – 18:00 |
Re-writing the CSIRT Playbook Jeff Bollinger (Cisco) , Matthew Valites (Cisco) |
| 18:00 – 20:00 |
Social Reception |

| Technical Colloquium (Wednesday) | |
|---|---|
| 08:00 – 09:00 |
Registration |
| 09:00 – 09:45 |
![]() Info Sharing after bot-net takedowns Martijn van der Heide (KPN-CERT — Chairman KPN-CERT, NL) |
| 09:45 – 10:15 |
Our Customer from the Underground Feike Hacquebord (Trendmicro) |
| 10:15 – 10:45 |
Networking and Coffee Break |
| 10:45 – 11:30 |
Spamhaus Data for CERTs and ISPs Carel van Staten |
| 11:30 – 12:30 |
SIE Security Information Exchange Paul Vixie (Internet Systems Consortium) |
| 12:30 – 13:30 |
Lunch |
| 13:30 – 14:15 |
Understanding CSIRT Knowledge Management Needs Oscar Serrano (NATO Communications and Information Agency) |
| 14:15 – 15:00 |
Expanding the Bitsquatting Attack Surface Jaeson Schultz, Cisco |
| 15:00 – 15:30 |
Networking and Coffee Break |
| 15:30 – 16:15 |
![]() In-house Developed Tools to Enhance Incident Response - Sharing MyCERT's Experience Sharifah Roziah Mohd Kassim (MyCERT, CyberSecurity Malaysia, MY) |
| 16:15 – 17:00 |
![]() Inside Torpig/Sinowal - An in depth (malware) analysis Godert Jan van Manen (Northwave, NL) |
| 17:00 – 17:45 |
What are Banks doing Against Malware? Jan Joris Vereijken (Chief Security Architect at ING) |
| 17:45 – 18:00 |
Wrap up |