FIRST & AfricaCERT Virtual Symposium for the African and Arab Regions 2021
2021-12-07..2021-12-09
-- online --
who it's for
csirt managers, incident responders, threat intelligence analysts, security operations center engineers, national cyber policy makers, network operations engineers, digital forensics practitioners
topics
MISP threat sharing deployment; MITRE ATT&CK navigator usage; Protective DNS RPZ on-prem deployment; Security Onion and ELK monitoring; TheHive and Cortex integration; SIM3 CSIRT maturity assessment; pfSense with Suricata perimeter stack; Shadowserver feed ingestion and takedowns; OpenCTI and threat intelligence platforms; national cyber crisis management plan; incident severity scale and escalation; ATT&CK-based detection engineering
| title | author | length |
|---|---|---|
| Welcome Remarks & Opening Address | Sherif Hashem, Serge Droz, Jean-Robert Hountomey, Wafa Dahmani, Kamel Saadaoui | 13m |
Virtual symposium reports 300+ participants from 70 countries and a packed program of five panels plus two days of training. Organizers describe a concrete… | ||
| Regional and International Initiatives | Sherif Hashem, Adil Suleiman, Serge Zongo, Eng. Badar Al Salehi, Elizabeth Vish, Nick Small, Jeremy Ketteringham, Palakiyem Assih | 01h 43m |
Panel lists concrete outputs: African Union convention has 10 ratifications and needs five more to enter force; ITU reports 36 country assessments, ~11… | ||
| Frameworks and Related Standards | Jean-Robert Hountomey, Klaus-Peter Kossakowski, Peter Allor, Don Stikvoort, Justin Novak, Mwende Njiraini | 01h 29m |
A practical map of what to adopt now: published CSIRT and P‑SIRT service frameworks define service areas and subfunctions (discovery → analysis → vendor… | ||
| Open-source Tools and CSIRT Success Stories | Nabil Sahli, Marwan Ben Rached, Omo Oaiya, Kevin Meynell, Eunju Pak, Guenaëlle De Julis, Mahmoud Raouf, Mariem Mahjoub | 01h 27m |
ITU reports over 80 readiness assessments and 173 project implementations and runs 32 cyber exercises with 100+ countries; a lightweight CSIRT stack uses… | ||
| Open Data (OSINT) and Threat Intelligence Sharing Platforms and Tools | Jean-Robert Hountomey, Andras Iklody, John Grim, Piotr Kijewski, Adli Wahid, Lawrence Muchilwa | 01h 27m |
Panel shows concrete, usable plumbing: deploy MISP for sharing and takedowns, use the VARUS A4 schema to code incidents, ingest Shadowserver feeds via API and… | ||
| Observed Malicious Cyber Criminality During COVID in the African and Arab Regions | Wafa Dahmani, Abdul-Hakeem Ajijola, Mohamed Ali Benmabrouk, Haitham Al Hajri, Carlos Alvarez | 45m |
Regional CSIRTs report dramatic spikes in COVID-themed attacks: 35.2 million events in one Kenyan quarter (a 152.9% rise), widespread phishing, ransomware and… | ||
| Protective DNS – Why It Matters and How to Deploy It On-prem | Boris Taratine | 02h 04m |
Claims an on‑prem DNS firewall using RPZ blocks most new malicious domains in real time. Uses Bind RPZ on Ubuntu 20.04 (Raspberry Pi or VM), subscribes to an… | ||
| Open-source Tools for CSIRTs | Nabil Sahli, Amine Rached | 04h 02m |
Practical CSIRT stack built from TunCERT field experience: a perimeter demo using pfSense on FreeBSD with DMZ/LAN rules and CARP high‑availability, network… | ||
| National Cyber Crisis Management | Kaleem Ahmed Usmani | 02h 56m |
Outlines a concrete national cyber crisis response: a formal plan, who does what, and how to declare a national incident using a severity 0–5 scale so actions… | ||
| MISP Fundamentals | Alexandre Dulaunoy, Sami Mokaddem | 03h 43m |
Live demonstration of the open‑source MISP platform showing how to create events and objects, ingest reports, and extract email/URL/attachment attributes into… | ||
| MITRE ATT&CK Fundamentals | Sean Whitley | 01h 47m |
MITRE ATT&CK is a free, community‑curated knowledge base of real-world adversary behaviors that maps 14 Enterprise tactics to techniques and (as of recent… | ||
| nothing matches | ||