
CRESTCon UK Cyber IR and SOC Community Day 2025
Join us for a dynamic day focused on all things Incident Response and Security Operations Centre, featuring expert tech talks, networking opportunities, and fresh insights into the tools, techniques, and trends shaping the field.
Let’s shape the future of cyber security – together.
Agenda
09:00 Arrival and refreshments
09:30 Welcome – Martin Riley and Benn Morris
09:45 Jamie Roderick – Active Defence; Less QQ, more Pew Pew
10:30 Manos Drakakis – SIEM Migration in Action: Lessons from an eCommerce Splunk-to-Sentinel Transition
11.15 Break
11:45 Kevin Vizzard – Creating an AI-Assisted Event log Analyser
12:30 Tony Gee -Deepfakes and Cookie Jars: The New Entry Points for Ransomware
13:15 Lunch and Networking
14:15 Welcome Back
14:20 Daniel Coley – Failed attempt at a malicious SVG file
15:05 Grab a drink
15:15 Panagiotis Chatzipanagiotou & Sotiris Mavrakis – Transforming Detection Engineering and Governance with XSOAR, Sigma, LLMs, and Fusion Analytics
16:00 Stefan Bargan – De-obfuscate, Decide, Do: Using an AI Copilot on Suspicious PowerShell
16:45 Closing comments
17:00 Networking event
19:30 Event ends
