| layout | page |
|---|---|
| title | 2026 EU MITRE ATT&CK® Community Workshop |
The 2026 EU MITRE ATT&CK® Community Workshop has taken place on 6 May 2026, hosted by EUROCONTROL in collaboration with the Centre for Cybersecurity Belgium, the MITRE Center for Threat-Informed Defense and MITRE ATT&CK. The slide decks of the presentations at the event can be downloaded via the following link:
Presentations at the 2026 EU MITRE ATT&CK Community Workshop
| Timing | Title | First name | Last name | Organisation | |
|---|---|---|---|---|---|
| 09:00 - 09:30 | REGISTRATION | ||||
| 09:30 - 09:35 | Welcome | Clara | Grillet | CCB | |
| 09:35 - 09:40 | Opening Keynote | Freddy | Dezeure | Microsoft | |
| 09:40 - 09:45 | Opening Keynote | Patrick | Mana | EUROCONTROL | |
| 1 | 09:45 - 10:00 | Building Resilient AI Security Controls Using MITRE ATT&CK® and ATLAS™ | Ana | Lakshmanan | Microsoft |
| 2 | 10:00 - 10:15 | The Automation Illusion? Bridging Threat Modeling and Threat-Informed Defense | Sebastien | Deleersnyder | Toreon |
| 3 | 10:15 - 10:30 | When your ATT&CK map lands on a GRC desk | Dennis | Verslegers | Orange Cyberdefense |
| 4 | 10:30 - 10:45 | From ATT&CK-driven Scoring to Strategy: Advancing Cyber Risk Quantification through Contextualization | Hanna Artem |
Holych Zhylin |
CERT-UA |
| 5 | 10:45 - 11:00 | Country-Specific and Sector-Specific Threat Models as a Public Service | Jan | Kopriva | Nettles Consulting |
| 11:00 - 11:30 | BREAK | ||||
| 6 | 11:30 - 11:45 | Intelligence that Drives Action - Operationalizing CTI using MITRE Attack Flow v3 | Rajendra | Mekhale | Itsme |
| 7 | 11:45 - 12:00 | Cyber Offence Risk Modelling for AI Safety Evaluations and the use of MITRE ATT&CK | Luca | Massarelli | European Commission |
| 8 | 12:00 - 12:15 | Defending the Critical Path: Business‑Aligned Threat Modelling with MITRE ATT&CK | Jennifer | Henoch | Macquarie Group |
| 9 | 12:15 - 12:30 | AI in the Crosshairs: Operationalising MITRE ATLAS Alongside ATT&CK | Chris | Brake | AttackIQ |
| 10 | 12:30 - 12:45 | From SIEM-Centric to Modernized SOC: Decoupling Data, Detections, and Response. | Hieu | Tran | FPT |
| 11 | 12:45 - 13:00 | AI inSecurity Testing: MITRE ATLAS angle | Vito | Rallo | Kyndryl |
| 13:00 - 14:15 | LUNCH | ||||
| 12 | 14:15 - 14:30 | Going Full Spectrum with AI-Powered Red Ops | Jeroen | Vandeleur | Proximus, SANS, Owner of Agron |
| 13 | 14:30 - 15:00 | What's going on with MITRE ATT&CK in 2026 | Lauren Adam |
Lusty Pennington |
MITRE ATT&CK |
| 14 | 15:00 - 15:15 | Keeping Europe SAFE, One Technique at a Time | Teodor | Mihailescu | The Romanian national cyber security and incident response team (DNSC) |
| 15 | 15:15 - 15:30 | Advancing Threat-Led Defense with Generative AI | Ian | Davila | Tidal Cyber |
| 15:30 - 16:00 | BREAK | ||||
| 16 | 16:00 - 16:15 | Latest updates of the MITRE Center for Threat-Informed Defense | Leslie | Anderson | MITRE Center for Threat-Informed Defense |
| 17 | 16:15 - 16:30 | From Threat Scenarios to ATT&CK Mapping: Making Threat Modeling Actionable Without False Precision | Nathan | Pembe | NVISO |
| 18 | 16:30 - 16:45 | Beyond detection rules | LTC Maciej | Szymczyk | Polish Cyber Command |
| 19 | 16:45 - 17:00 | Securing the Agentic Control Plane | Daniele | Catteddu | Cloud Security Alliance |
| 17:00 - 17:10 | Closing of event | Clara | Grillet | CCB | |
| 17:10 - 18:30 | DRINK |
We look forward to welcoming you back for the 2027 edition!
The EU ATT&CK Community is a diverse community of practitioners including security professionals, cybersecurity vendors, CSIRTs/CERTs and user organisations whose aim is to actively use MITRE ATT&CK® while contributing back to improve cyber defense. The EU MITRE ATT&CK® Community is a volunteer-driven vendor neutral platform where all users can discuss, exchange and improve their use of adversary tactics and techniques together in practical use cases like attribution, prevention, detection, hunting and response.
If you want to get in touch with us, you can reach us via email info@attack-community.org.