Members of EGI CSIRT and the CERN Computer Security Team ran a training at the recent TF-CSIRT/FIRST meeting in Malaga. This was a very well attended workshop which explored the concepts and workflows used in a SOC using a self contained system; the afternoon yielded some great feedback and ideas for the future! The slides for this event have now been posted, which include a link to the training VM and instructions on how to use it.

You can find more information about the workshop, including a link to the slides, here: