Program Overview

FIRST Cyber Threat Intelligence Webinar Series

All times below are set in UTC (GMT +0000).

Monday, May 4th

Monday, 4 May
17:00 – 18:00
 NL

Building an Intelligence-Driven Organization

Anastasios Pingios (Booking.com, NL)

18:00 – 19:00
 LU

Turning Data into Actional Intelligence - Advanced Features in MISP Supporting Your Analysts and Tools

Alexandre Dulaunoy , Andras Iklody (CIRCL.LU, LU)

Tuesday, May 5th

Tuesday, 5 May
17:00 – 18:00
 GB

Deep Derp Web? - Is Criminal Intel from 'Dark Web' Really Still Effective?

James Chappell (Digital Shadows, GB)

18:00 – 19:00
 CA

A Tale of Two Cybers - How Threat Reporting by Cybersecurity Firms Systematically Underrepresents Threats to Civil Society

Lennart Maschmeyer (University of Toronto, CA)

Wednesday, May 6th

Wednesday, 6 May
17:00 – 18:00
 NL

CTI Collaboration Using STIX and Elasticsearch

Chris O'Brien (EclecticIQ, NL)

18:00 – 19:00
 US

Sighting Use Cases

Sebastien Tricaud (Devo Inc., US)

Thursday, May 7th

Thursday, 7 May
17:00 – 18:00
 US

MalDomain ML: A Machine Learning Model to Find Malicious Domains Before They Go Bad

John Bambenek (Bambenek Consulting, LTD, US)

18:00 – 19:00
 DE

rcATT: Retrieving ATT&CK Tactics and Techniques in Cyber Threat Reports

Marco Caselli (Siemens, DE)

Friday, May 8th

Friday, 8 May
09:00 – 10:00
 JP

Rethinking the Graph Visualization for Threat Reports

Mayo Yamasaki (NTT-CERT, JP)

10:00 – 11:00
 US

xHunt... An Anime Fan's Attack Campaign in the Middle East

Brittany Barbehenn, Robert Falcone (Palo Alto Networks, US)

Monday, May 11th

Monday, 11 May
17:00 – 18:00
 NL

Narrator: Generating Intelligence Reports from Structured Data

Jörg Abraham, Sergey Polzunov (EclecticIQ, NL)

18:00 – 19:00
 NL

Obtaining Cyber Threat Intelligence through Reverse Engineering

Matthijs Bomhoff (Tesorion, NL)

Tuesday, May 12th

Tuesday, 12 May
17:00 – 18:00
 US

Bringing Intelligence into Cyber Deception with MITRE ATT&CK

Adam Pennington (MITRE, US)

18:00 – 19:00
 NL

Understanding What's Next; Combining Red Team Findings and Adversary Playbooks

Gert-Jan Bruggink (Falconforce, NL)

Wednesday, May 13th

Wednesday, 13 May
17:00 – 18:00
 US

How I Became Our Own Worst Enemy, I Mean Adversary

John Stoner (Splunk, US)

18:00 – 19:00
 US

From ‘Fog of War’ to Reducing Noise in Daily Operations

Graham Westbrook (Living Security , US); Wilson Bautista (Jün Cyber, US)