Hands-On Incident Response and Forensics Workshop

from Monday, 29 September 2025 (00:30) to Tuesday, 30 September 2025 (21:30)
CERN (37/R-022)

        : Sessions
    /     : Talks
        : Breaks
29 Sept 2025
30 Sept 2025
AM
08:30 --- Welcome Session ---
09:00 Introduction to incident response  
09:30 Attacker objectives  
10:00 --- Coffee Break ---
10:30 Essentials of data collection  
09:00 File System and Timeline Analysis  
09:40 Persistence Mechanisms  
10:00 --- Coffee Break ---
10:30 Live Incident Response Exercise  
PM
12:00 --- Lunch Break ---
13:30 Malware Introduction  
14:00 SIEM  
14:20 Command and Control  
14:45 --- Coffee Break ---
15:15 Malware Payloads  
16:00 Rootkits  
17:30 --- CERN Visit ---
12:00 --- Lunch Break ---
13:30 Live Incident Response Exercise  
14:45 --- Coffee Break ---
15:15 Live Incident Debrief + Round Table  
16:30 Summary and Takeaways