Dates and Location

The 67th TF-CSIRT meeting took place from 28-29 September 2022. The meeting took place in Vilnius, Lithuania and is kindly hosted by Nord Security.

Programme Overview

meetingdatetime
TF-CSIRT Steering Committee (invitation only)27 September 202214:00 – 17:00 EEST
Informal self-funded meet-up for those arriving on Tuesday
Meeting place: Uncle Sam’s American Pub (Islandijos g. 1)
27 September 202218:30 EEST
TF-CSIRT Closed Meeting (Accredited and Certified Teams only)28 September 202209:00 – 12:30 EEST
TF-CSIRT Open Meeting28 – 29 September 202213:30 – 17:00 EEST (28 September 2022)
09:00 – 12:00 EEST (29 September 2022)
Social Event28 September 202217:00 EEST
Overview of TF-CSIRT Meetings

Detailed Programme: 28 September 2022

TIMETOPICSPEAKERTLP
09:00 – 12:30Closed Session: TI Accredited and Certified Teams onlyVariousAmber / Red
12:30 – 13:30LUNCH
Venue: Jasinskio g. 16B, rooftop of the Victoria Business Centre
13:30 – 13:50Welcome and TF-CSIRT Steering Committee UpdateSilvio Oertli (SWITCH CERT)Clear
13:50 – 14:20Nord Security Team IntroductionAndrius Januta (Nord Security)Clear
14:20 – 14:40CSIRT Roles and Competences FrameworkVilius Benetis (NRD CIRT)Clear
14:40 – 15:10TLP 2.0Vilius Benetis (NRD CIRT)Clear
15:10 – 15:40BREAK
15:40 – 16:00Patching on a global scale: how fast do we really apply patches?Jan Kopriva (TI Associate)Clear
16:00 – 16:20CERT-SE Team Update and Swedish electionKarl Selin (CERT-SE)Green
16:20 – 16:50 Lightning Talks:
– 4 years with Phishing training, what has changed? – Justinas Rastenis (LITNET/VilniusTech)
LAYER8 Team Introduction – Fernando Cardoso & Artur Martins (LAYER8)
– Unexpected value of the TF-CSIRT community – the fastest computer emergency response in 2018!
Milda Mimienė (LITNET)
F&OSS Tools for CSIRTs – Josef Šmidrkal
– Cyber Threat Intelligence – Roderick Mooi
VariousClear
16:50 – 17:00Final discussions and close of day Silvio Oertli (SWITCH CERT)Clear
17:00 – 20:00 SOCIAL EVENT – dinner and drinks
Venue: Jasinskio g. 16B, rooftop of the Victoria Business Centre
20:00 AFTERPARTY
Venue: Bar “Distilerija”, Vilniaus g. 28

Detailed Programme: 29 September 2022

TIMETOPICSPEAKERTLP
09:00 – 09:10Welcome and Introduction to Day 2Silvio Oertli (SWITCH CERT)Clear
09:10 – 09:35Nordic Regional SOC – new structure, new challenges. Fishing for ideas!COL. Romualdas Petkevičius
(Regional Cyber Defence Centre/NCSC)
Clear
09:35 – 10:05The European Cybersecurity Competence Centre (ECCC) and
Network and their cybersecurity funding opportunities
Heiko Siebel & Sirko Höer (CERT-Bund)Clear
10:05 – 10:35Project CATnip ExperiencesMathias Karlsson (SWITCH-CERT)Clear
10:35 – 11:00BREAK
11:00 – 11:30Threat modeling in security operationsJan Kopriva (TI Associate)Clear
11:30 – 11:50Managing large scale significant incident during the pandemicKrzysztof SOCHA (CERT-EU)
11:50 – 12:00Closing Remarks and Next MeetingSilvio Oertli (SWITCH CERT)Clear
12:00 LUNCH
(light lunch will be served outside of the meeting room)