BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//ical.marudot.com//iCal Event Maker
CALSCALE:GREGORIAN
BEGIN:VTIMEZONE
TZID:Asia/Singapore
LAST-MODIFIED:20250410T142247Z
TZURL:https://www.tzurl.org/zoneinfo-outlook/Asia/Singapore
X-LIC-LOCATION:Asia/Singapore
BEGIN:STANDARD
TZNAME:+08
TZOFFSETFROM:+0800
TZOFFSETTO:+0800
DTSTART:19700101T000000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
DTSTAMP:20260818T050345Z
UID:1787029377398-80620@ical.marudot.com
DTSTART;TZID=Asia/Singapore:20261014T143000
DTEND;TZID=Asia/Singapore:20261014T150000
SUMMARY:Trellix GovWare Conference Session | Operational Intelligence Starts Here: Structuring Threat Actors & Tools in MISP for AI-Driven Defense
DESCRIPTION:Trellix is at GovWare this year - meet our experts at Booth U01. Look forward to our conference session by James Murphy\, Field CTO\, APJ\, Trellix. Find out more about this session below.\n\n\nAbout the session: \nModern defenders are drowning in indicators but starving for context. Most CTI sharing relies on loose IoCs and unstructured notes that are impossible to operationalize at scale\, let alone feed into AI systems This talk presents a practical open approach to transforming MISP from an indicator repository into a structured AI-ready threat intelligence backbone \n\nWe show how to model threat actors\, tools\, campaigns & TTPs using MISP objects\, galaxies & relationships to create a consistent machine-readable knowledge layer This shifts focus from isolated indicators to behavioral intelligence\, enabling automated enrichment\, faster correlation & more reliable detection engineering We'll also release a public GitHub repository of reusable actor and tool models so teams can immediately adopt & contribute to the same structured approach If we want scalable AI-assisted incident response\, we must standardize how we model threats. MISP gives us the foundation\; the community provides the momentum.
LOCATION:Level 3\, Room GW5\, Marina Bay Sands Expo & Convention\, 10 Bayfront Ave\, Singapore 018956
X-MICROSOFT-CDO-BUSYSTATUS:BUSY
BEGIN:VALARM
ACTION:DISPLAY
DESCRIPTION:Trellix GovWare Conference Session | Operational Intelligence Starts Here: Structuring Threat Actors & Tools in MISP for AI-Driven Defense
TRIGGER:-PT15M
END:VALARM
END:VEVENT
END:VCALENDAR