Login

WLCG SOC WG Hackathon 2025

15–17 Sept 2025
University Politehnica of Bucharest
Europe/Bucharest timezone

Contribution List

38 / 38
1. Intro
Dr David Crooks (UKRI STFC), Liviu Valsan (CERN), Maria-Elena Mihailescu (National University of Science and Technology POLITEHNICA Bucharest (RO))
15/09/2025, 09:00
26. Roundtable and agenda tweaking
15/09/2025, 09:15
27. STFC status
Dr David Crooks (UKRI STFC), James Acris (STFC), Liam Atherton
15/09/2025, 09:45
28. CERN update
15/09/2025, 10:05
35. UPB SOC status update
Maria-Elena Mihailescu (National University of Science and Technology POLITEHNICA Bucharest (RO))
15/09/2025, 10:15
29. Recap of reference design, current tools, etc
15/09/2025, 11:00
2. Options for future additions to reference toolset (Suricata, Wazuh,...) and people with experience
Dr David Crooks (UKRI STFC)
15/09/2025, 11:10
32. Documentation work
15/09/2025, 11:30
3. MISP, Shuffle and Honeypot infrastructure deployment and configuration
Dragos Sanda
15/09/2025, 14:00
30. MISP warning lists
Liviu Valsan (CERN)
15/09/2025, 14:45
31. MISP Integrations with commercial tools
Dr David Crooks (UKRI STFC)
15/09/2025, 15:00
4. Lightweight SOC / Unicor
Romain Wartel (CERN)
15/09/2025, 16:00
37. Automatic integration between Cowrie and MISP using Dissect
Andreia Ocănoaia (National University of Science and Technology POLITEHNICA Bucharest (RO))
16/09/2025, 09:00
38. Websites scanning using nuclei and automatic incident generation in DFIR-IRIS
Darius Mihai (National University of Science and Technology POLITEHNICA Bucharest (RO))
16/09/2025, 09:15
5. Opensearch
16/09/2025, 09:30
36. Zeek in UPB - PoC
Stefan Jumărea (National University of Science and Technology POLITEHNICA Bucharest (RO))
16/09/2025, 11:00
6. Zeek builds, updates and documentation
Liviu Valsan (CERN)
16/09/2025, 11:20
  • Update Zeek builds and current documentation (add feature builds as well?)
  • Upgrade cycles for key components
    • When to upgrade Zeek?
8. Validation tests & exercises
16/09/2025, 14:00
24. Breakout Room 1
16/09/2025, 16:00
25. Breakout Room 2
16/09/2025, 16:00
7. SOC Employee journey (on-boarding, mentoring, career path, evaluation)
Andreea Grama
16/09/2025, 16:00
  • Document lifecycle of a SOC Analyst
33. SOC Analysis
16/09/2025, 16:45
  • Establish plan to share Zeek scripts (common repo?)
  • Users of a SOC service: reporting lines: creating dashboards and interfaces for responders and analysts
    • Including reporting for management and interoperating
15. Breakout Room 2
17/09/2025, 09:00
9. Integrations with FIR/Velociraptor
Liviu Valsan (CERN)
17/09/2025, 09:00
34. Performance monitoring and tuning
17/09/2025, 09:30
  • OpenSearch
  • Zeek
  • Data Pipeline
10. Breakout Room 1
17/09/2025, 11:00
16. Breakout Room 2
17/09/2025, 11:00
17. Wrap Up
17/09/2025, 12:00
11. Breakout Room 1
12. Breakout Room 1
13. Breakout Room 1
14. Breakout Room 1
22. Breakout Room 1
18. Breakout Room 2
19. Breakout Room 2
20. Breakout Room 2
21. Breakout Room 2
23. Breakout Room 2
Powered by Indico v3.3.10-pre