EU ATT&CK Community Workshop
May 14, 2025 - May 15, 2025
BRUSSELS | Online
The 2025 EU ATT&CK Community Workshop will be hosted in Brussels by EUROCONTROL, in collaboration with the Centre for Cybersecurity Belgium (CCB) and the Center for Threat-Informed Defense. The event is organized as a half-day training on May 14th followed by a full-day workshop on May 15th.
Event Schedule
Threat-Informed Defense Training
Wednesday, May 14 from 13:00 – 16:00 (CET)
Mark Haase, CTID Chief Engineer, MITRE
Adam Pennington, ATT&CK Lead, MITRE
Defenders often track adversary behaviors atomically, focusing on one specific behavior at a time, but this narrow approach limits the defender’s toolkit. The Attack Flow project provides free, open source tools for visualizing and reasoning about the sequence of steps the adversary takes towards their ultimate goal, improving defense in depth.
This hands-on training covers the following topics:
- Introduction to Attack Flow
- Mapping ATT&CK Techniques in Narrative Reports
- How to Build Flows
- Lightning Talks from the Industry on Attack Flow Adoption
- Preview of Attack Flow v3 release
No prior experience with Attack Flow is needed. For questions about training, contact ctid@mitre.org.
EU ATT&CK Community Workshop
Thursday, May 15 from 9:30 – 17:30 (CET)
The workshop format is a series of short (15 minutes) lightning talks focused on the following themes:
- Tools and methods for sharing
- Rules, playbooks and processes
- ATT&CK® flavours (cloud, telecom, ICS, Active Defense…)
It will feature updates from the Center For Threat-Informed Defense and from the developers of systems and tools supporting the ATT&CK® Framework.