BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//bsidesluxembourg-2026//talk//CVMLKB
BEGIN:VTIMEZONE
TZID:CET
BEGIN:STANDARD
DTSTART:20001029T040000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000326T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=3
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-bsidesluxembourg-2026-CVMLKB@pretalx.com
DTSTART;TZID=CET:20260506T090000
DTEND;TZID=CET:20260506T110000
DESCRIPTION:Incident response isn't just about knowing your tools - it's ab
 out coordinating under pressure\, communicating when things go sideways\, 
 and making calls with incomplete information. Traditional training focuses
  on isolated techniques\, missing the collaborative reality of actual inci
 dents. And most tabletop exercises? Painfully dull. Participants zone out\
 , give checkbox answers\, and leave having learned little.\n\nThis worksho
 p introduces Malware & Monsters (https://malwareandmonsters.com)\, a frame
 work that turns IR training into something people actually enjoy. Think ta
 bletop role-playing meets creature-collection mechanics\, where teams "hun
 t and contain" digital threats through story-driven gameplay.\nGame-based 
 learning works - research shows it beats traditional instruction for skill
  building and retention. M&M makes participants actively discover concepts
  instead of sitting through lectures. Scenarios include organizational pre
 ssures\, evolving threats\, and stakeholder drama\, turning abstract secur
 ity concepts into tangible problems.\n\nYou'll experience the full methodo
 logy: learn the mechanics\, build custom scenarios based on real malware f
 amilies (mapped to MITRE ATT&CK)\, and run live simulations. Participants 
 take specialized roles - Hunter\, Analyst\, Forensicator\, Communicator\, 
 Coordinator\, or Researcher - experiencing how security functions actually
  collaborate during incidents.\n\nThe framework includes legacy malmons fr
 om malware history—because history always repeats itself\, and understan
 ding past threats reveals patterns in current attacks. The "type effective
 ness" system teaches strategic thinking about matching defenses to threats
 . Evolution mechanics show how attacks escalate when containment fails.\n\
 nParticipants walk away with ready-to-use materials and facilitation techn
 iques for training that actually works.\n\nBest of all? M&M is free to pla
 y in most cases.
DTSTAMP:20260412T024641Z
LOCATION:IFEN room 3 Workshops and AI Security Village (Building D)
SUMMARY:Gotta Contain 'Em All: Collaborative Incident Response Training Thr
 ough Gaming - Klaus Agnoletti\, Glen Sorensen
URL:https://pretalx.com/bsidesluxembourg-2026/talk/CVMLKB/
END:VEVENT
END:VCALENDAR
