BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//sched.securitybsides.org.uk//bsides-london-2023//talk//R
 9M9BG
BEGIN:VTIMEZONE
TZID:GMT
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:GMT
TZOFFSETFROM:+0100
TZOFFSETTO:+0000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T020000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:BST
TZOFFSETFROM:+0000
TZOFFSETTO:+0100
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsides-london-2023-R9M9BG@sched.securitybsides.org.uk
DTSTART;TZID=GMT:20231209T130000
DTEND;TZID=GMT:20231209T170000
DESCRIPTION:Email remains the #1 initial access vector for commodity malwar
 e and nation state actors. Historically\, tackling email-based threats has
  been considered the purview of black-box vendor solutions\, with defender
 s having limited scope (or tooling!) to swiftly and effectively respond to
  novel offensive tradecraft.\n\nIn this training\, attendees will be given
  detailed insight into the latest techniques used to deliver prevalent mal
 ware strains\, including QakBot and Emotet\, and will hunt through email d
 ata to identify this malicious activity\, developing rules to detect and b
 lock these attacks.\n\nInitially attendees will be introduced to the found
 ational technologies that enable threat hunting and detection engineering 
 in the email domain\, before being given access to the email data of a fic
 titious company seeded with benign and real-world attack data.\n\nAttendee
 s will be guided through the rule creation process\, utilizing free and op
 en detection engines including Sublime and Yara\, and will be introduced t
 o the signals that can be used to craft high-fidelity rules\, including se
 ntiment analysis\, domain age\, and attachment analysis. Having completed 
 the training\, attendees will have a strong understanding of the tools and
  techniques at their disposal to defend their organizations from all manor
  of email threats.
DTSTAMP:20260715T231045Z
LOCATION:Workshop Room 5
SUMMARY:Email Detection Engineering and Threat Hunting - Josh Kamdjou\, Alf
 ie Champion
URL:https://sched.securitybsides.org.uk/bsides-london-2023/talk/R9M9BG/
END:VEVENT
END:VCALENDAR