BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//sched.securitybsides.org.uk//bsides-london-2023//talk//M
 JJFXH
BEGIN:VTIMEZONE
TZID:GMT
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:GMT
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T020000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:BST
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsides-london-2023-MJJFXH@sched.securitybsides.org.uk
DTSTART;TZID=GMT:20231209T100000
DTEND;TZID=GMT:20231209T120000
DESCRIPTION:One of the challenges for security teams is writing and deployi
 ng detections that generate actionable alerts with rich context while also
  reducing noisy alerts. This hands-on workshop will teach the fundamentals
  of Purple Teaming and detection-as-code to help build new detections.\n\n
 This session will show how to leverage Purple team techniques to develop h
 ypotheses for new detections and strengthen their defenses against future 
 attacks.\n\nI will show how to use open-source offensive security tools to
  simulate attacks against lab infrastructure and use an investigative appr
 oach to learn and build new detections & manage them using detection-as-co
 de principles to eliminate noise and false positives.\n\nWho should attend
 ?\nThis hands-on virtual workshop is perfect for detection & security team
 s who are expected to develop and write detections to support new log sour
 ces\, threat models\, and vulnerabilities that are exploited in the wild.
DTSTAMP:20260714T133259Z
LOCATION:Workshop Room 3
SUMMARY:Purple Teaming with Detection-as-Code for Modern SIEM - Ken Westin
URL:https://sched.securitybsides.org.uk/bsides-london-2023/talk/MJJFXH/
END:VEVENT
END:VCALENDAR