BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//hack-lu-2025//talk//U3ZG7S
BEGIN:VTIMEZONE
TZID:Europe/Luxembourg
BEGIN:DAYLIGHT
DTSTART:20241021T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20241027T030000
RDATE:20251026T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20250330T030000
RDATE:20260329T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:intelmq.ai - adding ML model support to intelmq - Aaron Kaplan\, S
 ebastian Wagner\, Jürgen Brandl
DTSTART;TZID=Europe/Luxembourg:20251021T151500
DTEND;TZID=Europe/Luxembourg:20251021T154500
DTSTAMP:20260809T105702Z
UID:pretalx-hack-lu-2025-U3ZG7S@pretalx.com
DESCRIPTION:[IntelMQ](https://intelmq.org) is a great tool for automating 
 structured IT security data feeds for CERTs: need to process all of shadow
 server for a country? IntelMQ can easily do it. Need to alert on all vulne
 rable devices that shodan knows about? Sure! \n\nBut what about unstructur
 ed text? Many reports (CTI reports) contain lots of relevant information (
 IoCs\, TTPs\, etc.)\, but often in prose or only in semi-structured format
 s (hidden in a table\, etc.).\nFor information extraction\, LLMs and other
  AI models (BERT\, etc.) proved their merit already.\n\nThe presents will 
 show how they extended intelmq to support \nthese AI models and how the co
 mbination lends itself (semi-) automating a CTI analyst.\n\nIntelMQ to MIS
 P output included \;-)
LOCATION:Europe
URL:https://pretalx.com/hack-lu-2025/talk/U3ZG7S/
END:VEVENT
END:VCALENDAR
