2nd Edition: Hands-On Incident Response and Linux Forensics Workshop

from Tuesday, February 10, 2026 (8:25 AM) to Wednesday, February 11, 2026 (5:00 PM)
CERN (31/3-004)

        : Sessions
    /     : Talks
        : Breaks
Feb 10, 2026
Feb 11, 2026
AM
8:30 AM Welcome Session  
9:00 AM Introduction to incident response  
9:30 AM Attacker objectives  
10:00 AM --- Coffee Break ---
10:30 AM Essentials of data collection  
9:00 AM File System and Timeline Analysis  
9:40 AM Persistence Mechanisms  
10:00 AM --- Coffee Break ---
10:30 AM Live Incident Response Exercise  
PM
12:00 PM --- Lunch Break ---
1:30 PM Malware Introduction  
2:00 PM SIEM  
2:20 PM Command and Control  
2:45 PM --- Coffee Break ---
3:15 PM Malware Payloads  
4:00 PM Rootkits  
12:00 PM --- Lunch Break ---
1:30 PM Live Incident Response Exercise  
2:45 PM --- Coffee Break ---
3:15 PM Live Incident Debrief + Round Table  
4:30 PM Summary and Takeaways