|
09:00
|
Intro
-
Liviu Valsan
(CERN)
Maria-Elena Mihailescu
(National University of Science and Technology POLITEHNICA Bucharest (RO)) Dr
David Crooks
(UKRI STFC)
|
|
09:15
|
Roundtable and agenda tweaking
|
|
09:45
|
STFC status
- Dr
David Crooks
(UKRI STFC)
Liam Atherton
James Acris
(STFC)
|
|
10:05
|
CERN update
|
|
10:15
|
UPB SOC status update
-
Maria-Elena Mihailescu
(National University of Science and Technology POLITEHNICA Bucharest (RO))
|
|
10:30
|
--- Break ---
|
|
11:00
|
Recap of reference design, current tools, etc
|
|
11:10
|
Options for future additions to reference toolset (Suricata, Wazuh,...) and people with experience
- Dr
David Crooks
(UKRI STFC)
|
|
11:30
|
Documentation work
|
|
|
09:00
|
Automatic integration between Cowrie and MISP using Dissect
-
Andreia Ocănoaia
(National University of Science and Technology POLITEHNICA Bucharest (RO))
|
|
09:15
|
Websites scanning using nuclei and automatic incident generation in DFIR-IRIS
-
Darius Mihai
(National University of Science and Technology POLITEHNICA Bucharest (RO))
|
|
09:30
|
Opensearch
|
|
10:30
|
--- Break ---
|
|
11:00
|
Zeek in UPB - PoC
-
Stefan Jumărea
(National University of Science and Technology POLITEHNICA Bucharest (RO))
|
|
11:20
|
Zeek builds, updates and documentation
-
Liviu Valsan
(CERN)
|
|
|
09:00
|
Breakout Room 2
|
|
09:00
|
Integrations with FIR/Velociraptor
-
Liviu Valsan
(CERN)
|
|
09:30
|
Performance monitoring and tuning
|
|
10:30
|
--- Break ---
|
|
11:00
|
Breakout Room 1
|
|
11:00
|
Breakout Room 2
|
|
|
12:30
|
--- Lunch ---
|
|
14:00
|
MISP, Shuffle and Honeypot infrastructure deployment and configuration
-
Dragos Sanda
|
|
14:45
|
MISP warning lists
-
Liviu Valsan
(CERN)
|
|
15:00
|
MISP Integrations with commercial tools
- Dr
David Crooks
(UKRI STFC)
|
|
15:30
|
--- Break ---
|
|
16:00
|
Lightweight SOC / Unicor
-
Romain Wartel
(CERN)
|
|
|
12:30
|
--- Lunch ---
|
|
14:00
|
Validation tests & exercises
|
|
15:30
|
--- Break ---
|
|
16:00
|
Breakout Room 1
|
|
16:00
|
Breakout Room 2
|
|
16:00
|
SOC Employee journey (on-boarding, mentoring, career path, evaluation)
-
Andreea Grama
|
|
16:45
|
SOC Analysis
|
|
19:00
|
--- Workshop dinner ---
|
|
|
12:00
|
Wrap Up
|
|
12:30
|
--- Lunch ---
|
|