BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.bsidescbr.com.au//bsides-canberra-2026//talk//VVRUF
 E
BEGIN:VTIMEZONE
TZID:Australia/Sydney
BEGIN:STANDARD
DTSTART:20250926T000000
TZNAME:AEST
TZOFFSETFROM:+1000
TZOFFSETTO:+1000
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20251005T030000
RDATE:20261004T030000
TZNAME:AEDT
TZOFFSETFROM:+1000
TZOFFSETTO:+1100
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20260405T030000
RDATE:20270404T030000
TZNAME:AEST
TZOFFSETFROM:+1100
TZOFFSETTO:+1000
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:Software Supply Chain Threat Intelligence: Hands-On Training for S
 ecOps and Threat Hunting Teams - Paul McCarty
DTSTART;TZID=Australia/Sydney:20260926T090000
DTEND;TZID=Australia/Sydney:20260926T153000
DTSTAMP:20260727T185452Z
UID:pretalx-bsides-canberra-2026-VVRUFE@cfp.bsidescbr.com.au
DESCRIPTION:Software supply chain attacks have become one of the most sign
 ificant threats to organizations\, with nation-state actors like DPRK's La
 zarus Group actively compromising NPM packages\, PyPI libraries\, GitHub r
 epositories\, and VS Code extensions to target developers and steal creden
 tials\, cryptocurrency\, and source code. This all-day hands-on training e
 quips SecOps and threat hunting teams with practical skills to detect\, an
 alyze\, and extract actionable threat intelligence from real-world supply 
 chain malware—turning raw malware samples into finished intelligence pro
 ducts.\n\nParticipants will work directly with sanitized samples from acti
 ve campaigns including Contagious Interview\, PolinRider (DPRK)\, and Glas
 sworm (Russia)\, analyzing malicious artifacts across four major attack su
 rfaces: NPM\, PyPI\, GitHub\, and VS Code extensions. Beyond technical ana
 lysis\, attendees will learn about Paul's custom software supply chain CTI
  workflow: extracting IOCs\, pivoting across infrastructure to identify ca
 mpaign scope\, attributing activity to threat actors\, producing actionabl
 e reports\, and alerting the community to the threats you expose. The trai
 ning culminates with a 90-minute live hunting CTF-style session where part
 icipants apply their new skills to hunt for real threats and document find
 ings using professional intelligence standards
LOCATION:Murray-Fitzroy Room
URL:https://cfp.bsidescbr.com.au/bsides-canberra-2026/talk/VVRUFE/
END:VEVENT
END:VCALENDAR