BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.ozsecurity.org//ozsec-2026//talk//NSU3GN
BEGIN:VTIMEZONE
TZID:CST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T080000Z
TZNAME:CST
TZOFFSETFROM:-0500
TZOFFSETTO:-0600
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:CST
TZOFFSETFROM:-0500
TZOFFSETTO:-0600
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T090000Z
TZNAME:CDT
TZOFFSETFROM:-0600
TZOFFSETTO:-0500
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:CDT
TZOFFSETFROM:-0600
TZOFFSETTO:-0500
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-ozsec-2026-NSU3GN@cfp.ozsecurity.org
DTSTART;TZID=CST:20261024T100000
DTEND;TZID=CST:20261024T160000
DESCRIPTION:How would you respond if law enforcement reported finding your 
 organization’s financial information in a threat actor’s possession?\n
 \nThis drop-in Village invites participants to investigate a simulated FIN
 7 intrusion using WSU Tech’s Cyber Range. Participants can join at any t
 ime\, work individually or with others\, and explore one or more stages of
  the incident.\n\nThe investigation uses SIEM alerts\, firewall traffic\, 
 Windows events\, and system artifacts to reveal phishing-enabled access\, 
 network reconnaissance\, command-and-control activity\, lateral movement\,
  scheduled-task persistence\, financial-data staging\, and exfiltration.\n
 \nParticipants may focus on identifying the initial compromise\, tracing a
 ttacker movement\, confirming data loss\, or developing containment and re
 covery recommendations. Those who remain longer can continue through the c
 omplete incident sequence.\n\nFIN7 represents one of the many realistic si
 mulations available through WSU Tech’s Cyber Range. Participants will le
 ave with practical investigative experience\, a clearer understanding of t
 heir current capabilities\, and specific cybersecurity skills to continue 
 developing.
DTSTAMP:20260920T122539Z
LOCATION:Village 1
SUMMARY:Inside the Breach: Investigating FIN7 in WSU Tech’s Cyber Range -
  Matthew Lewis\, Jacob Buck\, Adam Shah
URL:https://cfp.ozsecurity.org/ozsec-2026/talk/NSU3GN/
END:VEVENT
END:VCALENDAR