BEGIN:VCALENDAR VERSION:2.0 PRODID:-//pretalx//pretalx.com//bsidesluxembourg-2026//speaker//SQVVHK BEGIN:VTIMEZONE TZID:CET BEGIN:STANDARD DTSTART:20001029T040000 RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10 TZNAME:CET TZOFFSETFROM:+0200 TZOFFSETTO:+0100 END:STANDARD BEGIN:DAYLIGHT DTSTART:20000326T030000 RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3 TZNAME:CEST TZOFFSETFROM:+0100 TZOFFSETTO:+0200 END:DAYLIGHT END:VTIMEZONE BEGIN:VEVENT UID:pretalx-bsidesluxembourg-2026-CVMLKB@pretalx.com DTSTART;TZID=CET:20260506T090000 DTEND;TZID=CET:20260506T110000 DESCRIPTION:Incident response isn't just about knowing your tools - it's ab out coordinating under pressure\, communicating when things go sideways\, and making calls with incomplete information. Traditional training focuses on isolated techniques\, missing the collaborative reality of actual inci dents. And most tabletop exercises? Painfully dull. Participants zone out\ , give checkbox answers\, and leave having learned little.\n\nThis worksho p introduces Malware & Monsters (https://malwareandmonsters.com)\, a frame work that turns IR training into something people actually enjoy. Think ta bletop role-playing meets creature-collection mechanics\, where teams "hun t and contain" digital threats through story-driven gameplay.\nGame-based learning works - research shows it beats traditional instruction for skill building and retention. M&M makes participants actively discover concepts instead of sitting through lectures. Scenarios include organizational pre ssures\, evolving threats\, and stakeholder drama\, turning abstract secur ity concepts into tangible problems.\n\nYou'll experience the full methodo logy: learn the mechanics\, build custom scenarios based on real malware f amilies (mapped to MITRE ATT&CK)\, and run live simulations. Participants take specialized roles - Hunter\, Analyst\, Forensicator\, Communicator\, Coordinator\, or Researcher - experiencing how security functions actually collaborate during incidents.\n\nThe framework includes legacy malmons fr om malware history—because history always repeats itself\, and understan ding past threats reveals patterns in current attacks. The "type effective ness" system teaches strategic thinking about matching defenses to threats . Evolution mechanics show how attacks escalate when containment fails.\n\ nParticipants walk away with ready-to-use materials and facilitation techn iques for training that actually works.\n\nBest of all? M&M is free to pla y in most cases. DTSTAMP:20260412T011814Z LOCATION:IFEN room 3 Workshops and AI Security Village (Building D) SUMMARY:Gotta Contain 'Em All: Collaborative Incident Response Training Thr ough Gaming - Klaus Agnoletti\, Glen Sorensen URL:https://pretalx.com/bsidesluxembourg-2026/talk/CVMLKB/ END:VEVENT BEGIN:VEVENT UID:pretalx-bsidesluxembourg-2026-J9BBAM@pretalx.com DTSTART;TZID=CET:20260507T154000 DTEND;TZID=CET:20260507T162000 DESCRIPTION:Tired of security training that puts your team to sleep? What i f I told you the most powerful training tool in cybersecurity has been sit ting in your game room all along? Welcome to the world of game-based learn ing\, where the proven power of play transforms how professionals master c omplex skills.\n\nResearch shows that humans learn best when working toget her\, yet traditional training methods keep pushing isolated\, theoretical learning. Game-based learning flips this approach on its head\, creating environments where people forget about office politics and actually engage with the material. Through structured play and collaborative storytelling \, participants don't just memorize concepts—they live them\, breaking d own professional barriers and building genuine understanding through exper ience.\n\nI'll show you the compelling evidence behind why using roleplayi ng games work\, and demonstrate how to transform resistant learners into e ngaged participants. Using compelling examples\, you'll discover how table top role-playing mechanics can turn your most challenging training scenari os—from incident response to zero trust architecture—into adventures y our team actually looks forward to.\n\nJoin me to learn why adding rolepla ying games to your professional development isn't just about making traini ng fun—it's about making it work. DTSTAMP:20260412T011814Z LOCATION:Main Stage SUMMARY:Dungeons & Dragons: The security power tool you didn’t know you n eeded - Klaus Agnoletti\, Glen Sorensen URL:https://pretalx.com/bsidesluxembourg-2026/talk/J9BBAM/ END:VEVENT BEGIN:VEVENT UID:pretalx-bsidesluxembourg-2026-CERTQC@pretalx.com DTSTART;TZID=CET:20260508T141000 DTEND;TZID=CET:20260508T145000 DESCRIPTION:Two blokes. One strategy. Train to Win or don’t bother playin g\n\nThere is little excuse for organisational failure when executing inci dent response as nearly every possible cyber security scenario has not onl y been documented but could be "role played" by your team well in advance of an actual incident.\n\nJoin Klaus Agnoletti & Ian Thornton-Trump for a talk focused on creating role playing experiences for your organization - based on the latest adversary threat intel. \n\nSpecific Take Aways inclu de:\n- Listening at the Door\n - Is there a sleeping Panda\, Kitten\, Bea r or Spider lurking in the network?\n- Checking for Traps\n - Can IR acti vities be carried out without alerting the threat actor?\n- Containment\n - Can the threat actor be contained\, or will they run and bring in reinfo rcements?\n- Clearing the Room\n - The threat actor may put up a fight\, d o you need to bring in additional help?\n- Looting the Room\n - The treasu re is the experience\, the coin is your pay check\n\nA hilarious RPG focus ed talk combining the best elements of scenario driven IR training with a creative spin. DTSTAMP:20260412T011814Z LOCATION:Workshops and Stage - Design Space (C1.05.12) SUMMARY:Agnoletti & Trump: Gaming Playing to Win at Cyber - Klaus Agnolett i\, Ian Thornton-Trump URL:https://pretalx.com/bsidesluxembourg-2026/talk/CERTQC/ END:VEVENT END:VCALENDAR