Lightning Talks
summary
New Bratislava CSIRT announces structure, claims 10 assigned CVEs and 15 in progress, 300+ IR engagements and in-house tools like Gargamel and IOC checker; CVE program overview states community-run CNAs and 212 CNAs in 33 countries; a malware analysis platform is demonstrated using S3 storage, Apache Airflow + IntelHour orchestration and third-party engines (VirusTotal, Hybrid Analysis), will be open-sourced in about a month; Log4Shell analysis flags CVSS 10.0 and ~8% of Maven libs affected and proposes simple Snort rules for strings like "exploit" or "base64"; pDNS SOC prototype sends passive DNS to a MISP-correlated central service, preserves no PII.
AI-written summary · about
chapters (7)
- 0:00Start
- 0:05Introduction of a New Team: IstroCSIRT (Henrich Slezak)
- 5:05CVE Lightning Talk (Shannon Sabens)
- 12:10Introduction of a New Team: Atos CERT (Aleksander Pawlicki)
- 15:21Malware Analysis Automation Platform (Martin Laštovička)
- 20:51Couple of Interesting Trends Seen in Log4shell Exploitation Attempts (Jan Kopriva)
- 29:26Leveraging MISP Intel via a pDNS-based Infrastructure as a Poor Man’s SOC (Christos Arvanitis)
related talks
01h 27mOpen-source Tools and CSIRT Success Stories
51mPanel Discussion: It is a Tale as Old as Time…. a CNA, the NVD, and a CVE Consumer Walk Into a ...
42mKeynote: The Expanding Universe of Cyber Threats
01h 04mOpen Discussion - International Challenges with CVD, CNA, and CVE
04h 02mOpen-source Tools for CSIRTs
57mPanel Discussion: This One Time at CVD Camp
17mTools & training for more secure software
41mKeeping Up With The Joneses (CVEs)