BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsidesluxembourg-2026//speaker//FDBKEC
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsidesluxembourg-2026-Z8EPNM@pretalx.com
DTSTART;TZID=CET:20260507T141000
DTEND;TZID=CET:20260507T144500
DESCRIPTION:Every week\, hundreds of threat intelligence reports are publis
 hed in prose — rich in context\, but locked in a format that no SIEM\, T
 IP\, or AI agent can consume. Without structure\, CTI stays trapped in PDF
 s and blog posts\, disconnected from the defensive stack that needs it mos
 t.\nThis talk presents a **practitioner and research-driven approach** to 
 closing that gap. Drawing from independent research on the **[TI Mindmap H
 UB]([url](https://ti-mindmap-hub.com/))** project and an academic study cu
 rrently under peer review\, benchmarking five LLM families against governm
 ent-grade STIX 2.1 ground truth\, the speaker demonstrates how a hybrid ar
 chitecture — combining deterministic extraction with LLM-based semantic 
 inference — can transform unstructured reports into **machine-readable S
 TIX 2.1 bundles**.\nBeyond generation\, the talk explores how STIX bundles
  become the foundation for **LLM-powered knowledge graphs** and how the **
 Model Context Protocol** (MCP) exposes structured CTI as tool calls for AI
  agents — making intelligence not just structured\, but conversationally
  actionable for both human analysts and autonomous copilots.\nThis is inde
 pendent research\, not a product pitch. The speaker invites collaboration 
 from the CTI community.\n_Disclaimer: TI Mindmap HUB is a personal\, indep
 endent research project. It is not affiliated with\, endorsed by\, or repr
 esentative of any employer\, organization\, or commercial entity._
DTSTAMP:20260412T010831Z
LOCATION:IFEN room 1\, Workshops and Detection Engineering village (Buildin
 g D)
SUMMARY:Your CTI Reports Are Useless Without Structure: From Unstructured T
 hreat Intel to STIX Knowledge Graphs with LLMs and MCP server - Antonio Fo
 rmato
URL:https://pretalx.com/bsidesluxembourg-2026/talk/Z8EPNM/
END:VEVENT
END:VCALENDAR