Hands-On Incident Response and Forensics Workshop

Europe/Zurich
37/R-022 - 37/R-022 (CERN)

37/R-022 - 37/R-022

CERN

25
Show room on map
Description

Introduction

This two-day workshop is designed for sysadmins and security professionals involved in the WLCG computing grid or the broader research and education (R&E) community looking to build hands-on skills in incident response and forensics. 

Participants will learn techniques for identifying, collecting, and analyzing digital evidence using open-source tools. Through practical exercises and interactive table-top scenarios, attendees will gain confidence in handling security incidents, from initial detection to effective containment and recovery. This event offers an opportunity to explore realistic security incidents and develop the skills for effective response. 

This event is an incredible opportunity to explore the facilities of one of the world’s leading scientific centers and connect with professionals who share your interests and expertise.

The CERN Computer Security Team is excited to welcome you for this unique, hands-on experience. We can’t wait to meet you! 

SG

Le Portail de la science (Image : CERN)

Registration

Participants will be selected based on their descriptions to ensure the best fit for the workshop. To maintain a small and highly practical format, only 20 participants will be admitted. Selection criteria include technical background, the criticality of their role in their organization's security, diversity, impact in research and academia, community contributions, and other relevant factors.

The event fee is 50 CHF, which helps ensure attendance and covers the cost of the event. Please note that other expenses, including accommodation and meals, are not included in this fee.

 

Registrations are complete. There are no more places available.

 
 
 
Registration
Workshop Registration
22 / 22
  • Monday 29 September
    • 08:00 08:30
      Welcome Session 30m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 08:30 10:30
      Introduction to incident response 2h 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 10:30 10:45
      Coffee Break 15m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 10:45 12:30
      Essentials of data collection 1h 45m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 12:30 13:30
      Lunch Break 1h 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 13:30 14:45
      Forwarding and organizing evidence 1h 15m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 14:45 15:00
      Coffee Break 15m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 15:00 17:00
      Digital forensics 2h 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 17:00 18:30
      CERN Visit 1h 30m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 19:30 21:30
      Group Dinner 2h
  • Tuesday 30 September
    • 08:30 10:00
      Live Incident Response Exercise - Evidence Collection 1h 30m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 10:00 10:15
      Coffee Break 15m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 10:15 11:45
      Live Incident Response Exercise - Evidence Analysis 1h 30m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 11:45 12:45
      Lunch Break 1h 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 12:45 13:45
      Live Incident Response Exercise - Incident Mitigation 1h 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 13:45 14:00
      Coffee Break 15m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 14:00 15:15
      Incident Review 1h 15m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 15:15 15:30
      Coffee Break 15m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 15:30 18:00
      Collaborative Live Incident Response Exercise 2h 30m 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map
    • 19:30 21:30
      Group Dinner 2h 37/R-022 - 37/R-022

      37/R-022 - 37/R-022

      CERN

      25
      Show room on map