THE RCTS CERT will hold a new edition of the CSIRT-in-a-Box Workshop from November 23rd to 26th.
This workshop will be held remotely through the Colibri platform (using Zoom technology).
The event is online and registration will be open until the 22nd, at: https://forms.gle/WF6jnRhzHvQr3jFUA
For registration to be considered validated, each participant must receive a message from RCTS CERT confirming registration, which will include the URL to access the sessions, which is unique for the 4 days.
The sessions will be on the afternoon of the 23rd, and on the mornings of the 24th, 25th and 26th.
Attendance at all sessions is not mandatory, as the workshop is organized into modules.
Agenda
Day 23 (2:00 PM - 5:00 PM)
– CSIRT-in-a-Box Package
– Construction of a new CSIRT
– Awareness Material
– Incident Response I
Day 24 (9:30-12:30)
– Incident Response II
– Coordination and Collaboration
– Splunk
– Netflow
Day 25 (9:30-12:30)
– Threats
– Security Audits
– IntelMQ
– Honeypots
Day 26 (9:30-12:30)
– Automation
– DNS Firewall
– Phishing Exercises
– Capture The Flag
– Commitment Indicators
