BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsides-tallinn-2026//talk//LSPSQU
BEGIN:VTIMEZONE
TZID:Europe/Helsinki
BEGIN:DAYLIGHT
DTSTART:20250924T000000
TZNAME:EEST
TZOFFSETFROM:+0300
TZOFFSETTO:+0300
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T040000
RDATE:20261025T040000
TZNAME:EET
TZOFFSETFROM:+0300
TZOFFSETTO:+0200
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T040000
RDATE:20270328T040000
TZNAME:EEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0300
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:(FULL) Inside Scattered Spider: A Red vs. Blue Breach & Attack Sim
 ulation - Marvin Ngoma
DTSTART;TZID=Europe/Helsinki:20260924T093000
DTEND;TZID=Europe/Helsinki:20260924T123000
DTSTAMP:20260926T112156Z
UID:pretalx-bsides-tallinn-2026-LSPSQU@pretalx.com
DESCRIPTION:Sign-up form: [**Google forms**](https://docs.google.com/forms
 /d/e/1FAIpQLSfyDWjKYOrV0mHxXlkwjWINIIqRIC_2qKlu75dg7OjY4pYBSA/viewform?usp
 =sharing&ouid=104367224945762059530)\n\nScattered Spider redefined modern 
 ransomware operations through sophisticated social engineering\, privilege
  escalation\, and rapid domain-wide compromise. In this immersive workshop
 \, participants experience the attack from both perspectives: first as the
  attacker\, then as the defender.\n\nWorking through a realistic breach si
 mulation\, you'll execute key phases of the attack before switching roles 
 to detect\, investigate\, and respond using modern detection and endpoint 
 security capabilities. By the end of the workshop\, you'll understand not 
 only how the attack works\, but why defenders succeed\, or fail\, at each 
 stage.\n\nYou'll learn:\n\nHow Scattered Spider gains initial access and e
 scalates privileges.\nHow to detect and investigate each stage of the atta
 ck.\nWhere traditional defenses fall short.\nHow modern security operation
 s and AI-assisted investigation can reduce time to detection and response.
LOCATION:MUSE 9:30-15:00
URL:https://pretalx.com/bsides-tallinn-2026/talk/LSPSQU/
END:VEVENT
END:VCALENDAR