BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsidescharm2026//speaker//WHZ7CX
BEGIN:VTIMEZONE
TZID:EST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T070000Z
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T080000Z
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsidescharm2026-3LRWDP@pretalx.com
DTSTART;TZID=EST:20260426T130000
DTEND;TZID=EST:20260426T135000
DESCRIPTION:The Human Centered Investigation Playbook (HCIP) standard is a 
 YAML-based syntax for writing investigation playbooks that correspond to a
  particular alert\, artifact\, or attack. The goal is to have an investiga
 tion methodology that both guides the analyst and also integrates into def
 ensive tooling to make necessary data easily available during the investig
 ation.\n\nIn this presentation I will discuss the standard\, explore its p
 urpose and use cases\, and demonstrate its functionality in a free and ope
 n monitoring platform.
DTSTAMP:20260417T061256Z
LOCATION:Track 2
SUMMARY:A Standard For Investigative Playbooks - Matthew Gracie
URL:https://pretalx.com/bsidescharm2026/talk/3LRWDP/
END:VEVENT
END:VCALENDAR