IHAP workshop day 2

IHAP stands for "Incident Handling Automation Projects". It started as an informal meeting as a side meeting next to multiple conferences.
At IHAP, developers of CSIRT tools meet, present their newest achievements, swap notes and exchange ideas on how to deal with anything related to automating the incident handling pipeline - mostly from a national CSIRT perspective.

Topics and tools discussed usually include:

• typical event processing tools such as IntelMQ, Abusehelper (open source), IDEA/Warden, n6, ...
• MISP, TheHive
• new ideas such as design ideas for a new Taranis
• discussions on automatic processes at national CSIRTs

There is also an IHAP mailing list, hosted at Trusted Introducer.
For more information on the IHAP group, please contact kaplan@cert.at

The training is free but there is a no-show fee of 40,- EUR if you register and don’t join us at the training without reasonable prior notice.

This training is free-of-charge but there is a no-show fee of 40,- EUR if you register and don’t join us for the training without cancellation. 

Prerequisites for AIL workshop:

As this is a technical workshop, attendees are expected to:

• Have a computer running Linux, or have Virtualbox installed
• Recommended laptop requirements: (2 cores, 8Gb RAM)
• Download and run the VM from https://www.circl.lu/services/ail-training-materials/ or install AIL before the training. We can give limited support during the training if necessary.

Who benefits most from this training:

As the topic of the training is centered around detection of information leak, experts working in this field will profit the most. Also, people wanting to discover and learn a scalable framework for generic information processing are more than welcome.

Requirement:

Be familiar with programming (not essential, but recommended)

Who is eligible to join the D4 workshop?

Representatives of the following types of organizations are invited to joing the workshop:

• CERT.LU members
• National CSIRTs
• Governmental CSIRTs
• TF-CSIRT members
• FIRST members

Duration:

This is an 8 hours training.

What is included:

• Training material
• Beverages
• Light lunch

Language of the course:

The course is given in English.

The Computer Incident Response Center Luxembourg (CIRCL) is a government-driven initiative designed to provide a systematic response facility to computer security threats and incidents. CIRCL, a department of SECURITYMADEIN.LU, is the CERT for the private sector, communes and non-governmental entities in Luxembourg.

More information about:

• CIRCL: https://www.circl.lu/
• SECURITYMADEIN.LU: https://securitymadein.lu/