2020

  • 2020/07/20-23 Pakistan. 4x3 hour sessions for the ISP/Telco community in Pakistan on Incident Response. Covered different topics and tools - including some practical forensics (file & memory - using tools in Tsurugi Linux), pcap analysis (Suricata) and show casing tools for incident management & coordianation - MISP, TheHive, etc.

  • 2020/07/14-17 Multiple sessions for the INTERPOL and UCENET community. This was done with friends from ICANN and ARIN. I shared some insights on malicious activities observed from the APNIC community honeynet project (ddos bots & cryptominers).

  • 2020/07/01 - Pacific Islands. Follow up tutorial (90 minutes) on Suricata for the PacSON Community. This time focusing on writing rules.

  • 2020/06/17 - Pacific Islands. 90 minutes tutorial for the Pacific Security Operation Network (PacSON) community on using Suricata for packet analysis. Used pcaps from Malware Traffic Analysis and also covered JA3/JA3s.

  • 2020/05/29 - 2020/06/15 Solomon Islands. Virtual workshop (spread over a few days) for the team at the Government Data Centre on setting up and using the Elasticstack for security monitoring.

  • 2020/05/15 - Indonesia. I participated in a panel discussion about CERT/CSIRT organised by Pak Eko Indrajit (Ex-IDSIRTII Director). Other panelists were National CSIRT friends from the region. Parcicipants were from all over Indonesia.

  • 2020/05/5-6 - Malaysia. 2 sessions with the MyREN community on practical use of Suricata. The sessions include hands-on installation/setting up Suricata. Analysing logs with jq & Evebox and writing signatures.

  • 2020/04/15 - Cambodia. Presentation on IoT security related threats for the security community in Cambodia (Secudemy). This is my first security engagement since the Covid-19 lockdown was declared. It was great to interact with about 40 partcipants & some friends from CamCERT.

  • 2020/02/27-28 Apia, Samoa. Conducted a 1/2 day workshop at seminar organised by Samoa IT Association. I did a phishing simulation using Gophish.

  • 2020/02/13-21 Melbourne, Australia. Delivered 1 day training as part of the Network Security Workshop & organized FIRST-TC, Melbourne @ APRICOT 2020

  • 2020/02/04 Brisbane, Australia. Delivered a 90 minutes webinar for the APNIC Academy on Learning from Honeypots. I shared about how honeypots can be useful for detection and talked about what we see in our community honeynet project.

2019

  • 2019/12/11-12 Jakarta, Indonesia. Delivered 2-day workshop on Threat Intelligence sharing for National CERTs from Indonesia, Cambodia (CamCERT), Laos (LaoCERT), Vietnam (VNCERT) and Timor Leste (TLCSIRT). The event was organised by UI and supported by JICA. Participants did some hands-on STIX/TAXII, MISP and ThHive.
  • 2019/12/6 Cyberport, Hong Kong. Attended DragonCon 2019
  • 2019/12/4-5 Taipei, Taiwan. Presented at TWNIC-OPM and TWNOG Conference.
  • 2019/11/27 Hanoi, Vietnam. Participated as facilitator at the ASEAN Cybernormsmeeting organised by ASPI. Also visited VNCERT/CC.
  • 2019/11/14-15 Wellington, New Zealand. Speaking at the NZITF Conference
  • 2019/11/4-8 Nadi, Fiji - FIRST Regional Symposia for the Pacific. I did a 1/2 day breach workshop (table top exercise) and co-teach with Serge Droz (Incident Response, Honeynet, Jupyter Notebook)
  • 2019/10/23-25 Apia, Samoa - CERT establishment proeject with MCIT & relevant stakeholders
  • 2019/10/15-18 Nukua’lofa, Tonga - Technial support for CERT Tonga + 1 day workshop of securing e-mail servers for System Administrators. About 30+ participants from government agencies and the private sector.
  • 2019/10/2 - Ulaanbatar, Mongolia - Presentation with Tugso (GEMNET) @ MNSEC2019(Annual Security Conference organized by MNCERT/CC)
  • 2019/09/30 - Singapore. 1/2 day tutorial on running honeypots for APCERT members @ APCERT AGM & Conference 2019. Workshop assisted by friends from TWNCERT.
  • 2019/09/05-11 - Chiang Mai, Thailand. 5 Day Network Security Worskhop (30 participants with 4 other instructors) and FIRST-TC on 9/11
  • 2019/08/19-23 - Thimphu, Bhutan - Web Application Security Workshop. Event organised by Bhutan Computer Incident Response Team (BtCIRT). Organised a CTF using OWASP Juice Shop on the last day.
  • 2019/07/22-24 - Jakarta, Indonesia - Packet Analysis Workshop. IDNOG6 . Lead trainer - cover Wireshark in depth, Suricata, Honeypots among other things
  • 2019/06/15-22 - Edinburgh, Scotland - FIRST Annual Conference & AGM. FIRST Board meeting. Lightning talk on APNIC activities in AP region
  • 2019/05/15-17 - Apia, Samoa - 3rd Regional CERT Workshop for the Pacific. Lead trainer.
  • 2019/04/8-12 - Lima, Peru - FIRST Board meeting
  • 2019/04/04 - Sydney, Australia - Standards Australia Regional Forum. Presented on APNIC CERT/CSIRT engagement work in the Pacific
  • 2019/03/25-29 - Phnom Penh, Cambodia - 4-day network security training (mostly ISPs, 30+ participants). 1/2 day tutorial & sharing with Cambodia CERT (CamCERT)
  • 2019/03/21-22 - Vientianne, Laos - 2 day workshop with LaoCERT. Covered a few tools Shodan, Suricata, TheHive and played with honeypots
  • 2019/03/19 - Hong Kong - HK Police Annual Cyber Command Course. Did a presentation on vulnerabilities and threats & 2 hour internet investigation tutorial with case studies. Show cased TheHive
  • 2019/02/19 - 2019/03/01 - Daejeon, South Korea - APRICOT 2019. Organized FIRST-TC Daejeon. Presented on the APNIC Community Honeynet Project in the lightning round session.
  • 2019/01/21-26 - Tallinn, Estonia - FIRST Board Meeting and attended FIRST Europe Regional Symposia. Presented about APNIC security engagement work in the Pacific

2018

  • 2018/12/17-19 - Honiara, Solomon Islands - 3 day workshop on incident response for the government SOC staff. Covered packet analysis, IDS, DIY audit (OpenVas, shodan, nmap). 1/2 day table top exercise & discussion with relevant stakeholders.
  • 2018/11/27-29 - Jakarta, Indonesia - 3 day Network Security Workshop. Lab session include deploying cowrie honeypot in the cloud, playing with Suricata and Maltrail.
  • 2018/11/7-8 - Kuala Lumpur, Malaysia - Attended the Asia ICT and Counter Terrorism Dialogue. I participated in the discussion in the “Critical Infrastructure Track” The event was organised by UN CTC and South Korea & Malaysia Government
  • 2018/10/23-26 - Shanghai, China - APCERT Annual Conference & FIRST Asia Regional Symposia. Presented at the APCERT open conference and helped with planning of the Symposia. The week long event was organized by CNCERT/CC
  • 2018/10/11-12 - Bali, Indonesia - Code Bali & FIRST-TC Bali. Conducted a 1 day workshop on Practical Packet Analysis. Approximately 25 participants - LEAs, security practitioners, researchers. Event organised by IDSIRTII
  • 2018/10/4-5 - Ulaanbatar, Mongolia - Presented on observations from the community honeynet project at the MNSEC Conference. The event was organized by MNCERT/CC.
  • 2018/10/3 - Taipei, Taiwan - Invited as keynote speaker at TWCERT/CC Annual Conference
  • 2018/09/30 - 2018/10/2 - Taipei, Taiwan - Attended APECTEL meeting and shared some case studies in one of the SPSG sessions.
  • 2018/09/18-20 - Port Moresby, Papua New Guinea - Technical Assistance for CERT PNG
  • 2018/09/6-13 - Noumea, New Caledonia - Lead trainer for the Network Security Workshop & 2nd Regional CSIRT Workshop for the Pacific (with 3 other trainers). Organized a one day FIRST-TC Noumea - speakers included from Raja Azrina (Malaysia), Geoffrey (CERT Vanuatu) , Geoff (AusCERT), Jinhyun (KISA/KrNIC) and others.
  • 2018/07/17 - Mersing, Malaysia (remote session) for students at Politeknik Mersing (Cyber Range Academy) on Linux server hardening & SOCs
  • 2018/07/03 - Kuala Lumpur, Malaysia - Workshop on Practical Incident Response. Organized by MyREN. Around 25 participants from Universities in Malaysia
  • 2018/06/21-28 - Kuala Lumpur, Malaysia - FIRST Annual Conference and AGM. Over 900 participants from all over the world. W00t!
  • 2018/06/19 - Port Vila, Vanuatu - CERT Vanuatu launch. Conducted a half-day workshop on incident response 101
  • 2018/06/4-8 - Port Moresby, Papua New Guinea. Attended APECTEL & presented at the SPSG session on internet infrastructure security. Session chaired by NICTA (PNG)
  • 2018/05/15-18 - Nukualofa, Tonga - 1st Regional CSIRT Training for the Pacific. Supported by DFAT. 25 participants from Pacific Island economies and Tonga. Spent 75% of playing with Wireshark!
  • 2018/05/02 - Brisbane, Australai - Participated in the speed networking session at PaCSON meeting hosted by CERT Australia (ACSC)
  • 2018/04/23-27 - Seoul, South Korea - Participated as instructor for the Annual CERT workshop (aka APISC) organized by KrCERT/CC (KISA)
  • 2018/04/16-17 - Apia, Samoa - CERT engagement with stakeholders in Samoa. Joint trip with ITU. Did an incident response 101 and table-top exercise with Klee Aiken (APNIC)
  • 2018/04/03 - Virtual - Prsenentation for APCERT online seminar. Shared analysis on Linux server compromise (bitcoin mining)
  • 2018/03/19-24 - Canberra, Australia - Attended SANS SEC 503. Intrusion Detection In-Depth
  • 2018/03/11-15 - Osaka, Japan - FIRST Board Meeting and participated in FIRST-TC Osaka. Shared experience of delivering capacity developent activites in the Pacific.
  • 2018/02/19-28 - Kathmandu, Nepal - APRICOT 2018. Crisis Communication & Incident Response workshop for APTLD. Organized FIRST-TC Kathmandu with the support of APCERT.
  • 2018/02/4-9 - Hamburg, Germany - FIRST Board Meeting and Regional Europe Symposia
  • 2018/01/30-2018/02/01 - Port Moresby, PNG - CERT PNG launch and 2 day worskhop on Incident Response

2017

  • 2017/12/18-12 - Geneva, Switzerland - Internet Governance Forum 2017. Speaker at one of the sessions. Participated in workshop Incident Response for Policy Makers at ITU HQ with fellow FIRST board members Maarten & Serge
  • 2017/12/1015 - Bangkok, Thailand - Participated in APECTEL. Presented in the session on incident management (organized by MCMC) and gave an update on APNIC’s activities in the SPSG session
  • 2017/12/4-8 - Nuakalofa, Tonga - Attended PacNOG & Tonga CERT engagement
  • 2017/11/24 - Tokyo, Japan - Participated in FS-ISAC Japan Cyber Security Exercise. Check out the post about a similar event that took place in 2016
  • 2015/11/21-23 - Chisinau, Moldova - Presented at the Regional Cyber Drill. Organized by ITU & Moldova Government CERT
  • 2017/11/12-15 - New Delhi, India - Attended the APCERT Annual Conference & AGM
  • 2017/10/24/26 - Dhaka, Bangladesh - Presented at the Asia Pacific Telecommunity (APT) Cyber Security Forum.
  • 2017/09/7-14 - Taichung, Taiwan- APNIC44 Conference. Trainer for the Network Security Workshop and organised FIRST Asia Regional Symposia (Plenary and Workshops)
  • 2017/09/6-7 - Taipei, Taiwan - Keynote speaker for Trend Micros’s CloudSec Taipei
  • 2017/08/28-29 - Colombo, Sri Lanka - SLCERT Cyber Security Week. Delivered a 1 day workshop on Practical Incident Response and presented at the main conference
  • 2017/08/21-22 - Vientiane, Laos - 1/2 day Cyber Security seminar & 2 day workshop for LaoCERT. Organised by LaoCERT.
  • 2017/07/31 - 2017/08/04 - Seoul, South Korea - Instructor for the Annual CSIRT workshop (aka APISC) organised by KrCERT/CC (KISA)
  • 2017/07/26-2 - Bangkok, Thailand - APRIGF 2017. Delivered a 1/2 day workshop on cyber security for civil society, table-top exercise with Saia (CERT Tonga) , Kititsak (Thai eGov CERT), Linda (ID) and Afifa (BD) and organized a panel discussion on challenges facing CERTs - with Sonam (btCIRT), Saia (CERT Tonga), Julie (TWNCERT/CC) and Martijn (ThaiCERT)
  • 2017/07/5-7 - Singapore, INTERPOL Cyber Crime Expert Group Meeting
  • 2017/06/11-16 - San Juan, Puerto Rico - FIRST Annual Conference and AGM
  • 2017/05/22-24 - Qindao, China - Keynote at the CNCERT Annual Conference and presented at the FIRST-TC event
  • 2017/05/17-18 - Port Vila, Vanuatu - Desktop Exercise at Seminar organised by TRR and CERT engagement session with OGCIO
  • 2017/04/8 - Kuala Lumpur, Malaysia - Durian Security Conference 2017, local community security conference. Program committee and organiser.
  • 2017/04/3-7 - Kuala Lumpur, Malaysia - FIRST Board Meeting & Site meeting. Discussion with CyberSecurity Malaysia
  • 2017/04/03 - Singapore, FS-ISAC APAC Summit - presented on cyber security engagement in the APAC region
  • 2017/03/14-16 - Canberra, Australia - Attended ACSC Conference 2017
  • 2017/02/22 - 2017/03/02 - Ho Chi Minh City, Vietnam - APRICOT 2017. Organized FIRST TC HCM & side meeting with APCERT SC members
  • 2017/01/23-27 - Valencia, Spain - FIRST Board meeting and FIRST Europe Regional Symposia
  • 2017/01/9-13 - Singapore - Workshop for Law Enforcement Officers at the INTERPOL Global Complex of Innovation (organized by INTERPOL)

2016

  • 2016/12/11-14 - Jeddah, Saudi Arabia - OIC-CERT Annual Conference. Presented of about APNIC and FIRST engagement activities
  • 2016/11/28 - 2016/12/02 - Suva, Fiji - PACNOG - conducted Network Security Workshop (with Fakrul) & presented at the main conference
  • 2016/11/2-5 - Colombo, Sri Lanka - Conducted workshop at SLCERT Cyber Security Week
  • 2016/10/24-27 - Tokyo, Japan - Attended APCERT Annual General Meeting and AGM
  • 2016/10/16-23 - Seoul, South Korea - Invited as instructor for regional CERT workshop (APISC) organized by KrCERT/CC
  • 2019/10/9-14 - Kuala Lumpur, Malaysia - Conducted Network Security Workshop with Pak Affan (ITB). Hosted by MyIX
  • 2016/10/3-5 - Colombo, Sri Lanka - APNIC42 - organized FIRST-TC Colombo with the support of Sri Lanka CERT.
  • 2016/09/29-30 - Ulaanbatar, Mongolia - presentation at MNSEC
  • 2016/09/12-13 - Hong Kong, presented at the HKCERT Information Security Summit
  • 2016/09/5-7 - Thimphu, Bhutan - Conducted Security seminar and CERT workshop. Hosted by BtCIRT
  • 2016/08/29-31 - Edinburgh, UK - Attended FIRST Board Meeting & Site visit
  • 2016/08/01-06 - Mumbai, India - Presented at SANOG and organized FIRST-TC Mumbai
  • 2016/07/14-17 - Bangkok, Thailand - Participated in RISE Conference. Organized by Team Cymru and hosted by ThaiCERT
  • 2016/06/12-19 - Seoul, South Korea - Attended FIRST AGM and Conference
  • 2016/05/30 - Jakarta, Indonesia - Delivered 1-day workshop on Malware analysis at CERT workshop for CLMV economies. Hosted by IDSIRTII & supported by JICA
  • 2016/05/23-27 - Goldcoast, Australia - Attended AUSCERT Conference. Contributed as PC member
  • 2016/05/4-5 - Nukualofa, Tonga - CERT engagement hosted by MEIDECC
  • 2016/04/4-8 - Doha, Qatar - Attended Underground Economy Conference. Presented on APNIC’s activities in the Lightning talk session
  • 2016/03/4 - Kuala Lumpur, Malaysia - Delivered 1/2 day workshop on Internet Investigation for Royal Malaysia Police.
  • 2016/03/2-3 - Kuala Lumpur, Malaysia - Presented at the Asia Regional Forum
  • 2016/02/20-24 - Auckland, New Zealand - Attended APRICOT 2016. Organized FIRST-TC Auckland
  • 2016/02/2-4 - Phnom Penh - Conducted workshop on network security. Gave a talk at a University & Cambodia CERT
  • 2016/01/25-29 - Prague, CZ - Attended FIRST Board meeting and FIRST Europe Regional Symposia

2015

  • 2015/11/30 - 2015/12/1 - Singapore - INTERPOL Cyber Crime Expert Group meeting
  • 2015/11/23-25 - Taipei, Taiwan - Invited as observer for TWNCERT/CC Cyber Security Exercise. Presented on cyber exercise design on the closing day
  • 2015/11/17-18 - Seoul, South Korea - Participated in FIRST-TC Seoul. Organized by KrCERT/CC
  • 2015/11/2-6 - Colombo, Sri Lanka - Participated in Cyber Security Week. Conducted Cybersecurity workshop with Champika (ICANN). Also presented at the main conference
  • 2015/10/28-29 - Bali, Indonesia - 2-day workshop on Incident response @ FIRST-TC bali
  • 2015/10/20-22 - Bangkok, Thailand - Presented at the Asia Pacific Telecommunity (APT) meeting
  • 2015/10/12-15 - Glasgow, UK - Participated in Underground Economy Conference. Organized by Team Cymru
  • 2015/09/6-10 - Kuala Lumpur, Malaysia - Attended APCERT and OIC-CERT Annual Conference and AGM. MoU Exchange with APCERT
  • 2015/09/6-10 - Jakarta, Indonesia - Delivered Network Security Workshop with 2 other trainers at APNIC40 Conference
  • 2015/08/31 - 2015/09/02 - Dublin, Ireland - Attended FIRST Board meeting
  • 2015/08/18-20 - Taipei, TW - Attended TWCSIRT’s HoneyCon & IRCON2015 (presented) and visitied TWNCERT/CC
  • 2015/07/XX - Seoul, South Korea - Participated as instructor in APISC (KrCERT/CC) Regional CSIRT workshop.
  • 2015/07/XX - Macau - Panelist for a session at the APRIGF 2015
  • 2015/06/14-19 - Berlin, Germany - FIRST Annual Conference and AGM. Elected as a FIRST Board Member
  • 2015/06/1-5 - Goldcoast, Australia - Attended the LEA session at AUSCERT Conference
  • 2015/05/26-28 - Beijing, China - Attended CNCERT/CC Annual Conference
  • 2015/05/XX - Jakarta, Indonesia - Delivered a 1-day workshop at the regional CERT training organized by JICA
  • 2015/05/XX - Boracay, Philippines - Participated in the SPSG meeting at APECTEL51
  • 2015/04/20-24 - Seoul, South Korea - Attended FIRST Board meeting
  • 2015/04/9-13 - Islamabad, Pakistan - Presented at Cyber Security Pakistan Conference. Delivered a 3 day Network Security Workshop with Champika (ICANN). Also joined a 1/2 day seminar for Law Enforcement Agencies
  • 2015/03/23-24 - Manila, Philippines - Conducted a table-top exercise at RightsCON. Collaboration with Access Now, Cloud Computing Association
  • 2015/02/26 - 2015/03/6 - Fukuoka, Japan - Attended APRICOT 2015. Organized a 1 day security plenary with the support of APCERT.
  • 2015/02/11 - Kuala Lumpur, Malaysia - Attended a GCCS prep meeting
  • 2015/02/05 - Singapore - Conducted 1 day workshop on Internet Investigation @ INTERPOL Globla Complex of Innovation
  • 2015/02/2-3 - London, UK - Participated in FIRST Education Summit
  • 2015/01/27-31 - Canary Island, Spain - Attended FIRST Board meeting and Regional European Symposia

2014

  • 2014/12/10-11 - Mumbai, India - Attended NASSCOM-DSCI Annual Summit 2014
  • 2014/11/14 - Suva, Fiji - Participated in the Regional Stakeholder Consultation Meeting on PacCERT and Regional/National CERT’s. PacCERT was announced as discontinued at this meeting
  • 2014/10/28-31 - Jakarta, Indonesia - Conducted worskhop on network security & analysis . Event organised by IDSIRTII
  • 2014/10/20-22 - Bandar Seri Begawan - OIC-CERT AGM and Annual Conference. Presented at the main conference and conducted a 1-day workhsop on network analysis
  • 2014/10/01-03 - Singapore - Attended the 2nd INTERPOL Europol Cybercrime Conference
  • 2014/09/02-05 - Istanbul, Turkey - Internet Governance Forum - Contributed to the Best Practice Forum on Establishing and Supporting Computer Security Incident Response Teams (CSIRT) for Internet Security
  • 2014/07/09-11 - Auckland, New Zealand - NetHui 2014 - Delivered a worskhop on Internet Investigation for LEAs. Collaboration with ICANN and InternetNZ
  • 2014/06/22-27 - Boston, USA - Attended the 26th Annual FIRST Conference. First time attending the conference as a Board Member
  • 2014/06/04-05 - Taipei , Taiwan - Conducted 1-day network security & Incident response workshop at TWNIC OPM. Organized by TWNIC
  • 2014/05/26-28 - - Ulaanbatar, Mongolia - Presented on Routing Security at the 5th APT Cybersecurity Forum (CSF-5)
  • 2014/05/19-24 - Dhaka - Bangladesh - BDNOG1, Regional Meeting, Tutorial & Workshop. 1/4 trainer for the Network Security workshop
  • 2014/05/12-16 - - Gold Coast, Australia - Attended AusCERT Conference 2014
  • 2014/04/21-26 - - Yangzhou, China - Attended APEC TEL 49. Participated in the SPSG session
  • 2014/03/18-21 - Taipei, Taiwan Participated in the APCERT Annual Conference
  • 2014/03/12 - London, UK - Law Enforcement Conference
  • 2014/03/10 - Amsterdam - Netherlands - Meeting @ RIPE NCC’s (Security Outreach & LEA engagement)
  • 2014/02/18-28 - Petaling Jaya - Malaysia - Attended APRICOT 2014 and APNIC 37 -