2019 FIRST Symposium on Cyber Threat Intelligence (CTI) - "Putting the Intelligence back into CTI"

A three day FIRST event focused on advancing threat intelligence-driven security operations and sharing beyond just technical indicators. There will be one day of training followed by two days of plenary sessions. Hosted by BT and Digital Shadows, this event will be open to both FIRST members and non-members.

Proceedings will not be recorded. No press will be admitted. Speakers may stipulate that their sessions be treated as confidential and all attendees are expected to respect this. Breaches of the FIRST Code of Conduct (including failing to respect the confidentiality of certain sessions) have consequences.

Information about registration and fees will be available soon.

FIRST is looking for speakers that would like to present on topics related to Cyber Threat Intelligence including:

• Metrics for assessing the effectiveness of an organization's CTI program.
• Data analysis techniques for measuring the quality of CTI.
• Finding the needle in the haystack: how do we prioritise effectively?
• Scaling the human: leveraging rare expertise in a scalable way.
• Adversary Emulation and TTPs - lessons from MITRE ATT&CK, CBEST, TIBER, and similar programs.
• Case studies that highlight failures and/or successes of using CTI.
• Operationalising CTI: effective tooling for protection, detection, and response.
• Overcoming CTI integration challenges in your security operations.
• CTI creation, enrichment, and refinement best practices.
• Collecting data: You'll never catch all the Pokemon.
• CTI in context with digital forensics.
• Intelligence tradecraft wasn't invented yesterday: cross-pollinating tools and techniques to the cyber domain.
• Protecting human rights and civil society in the context of the dual-use nature of CTI.