BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//pretalx.com//hack-lu-2026//speaker//MUFFYX
BEGIN:VTIMEZONE
TZID:Europe/Luxembourg
BEGIN:DAYLIGHT
DTSTART:20251021T000000
TZNAME:CEST
TZOFFSETFROM:+0200
TZOFFSETTO:+0200
END:DAYLIGHT
BEGIN:STANDARD
DTSTART:20251026T030000
RDATE:20261025T030000
TZNAME:CET
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20260329T030000
RDATE:20270328T030000
TZNAME:CEST
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
SUMMARY:HHAMMERRing the Noise: AI-Agentic Threat Hunting with Suricata and
  the Power of EVE Metadata - Peter Manev\, Eric Leblond
DTSTART;TZID=Europe/Luxembourg:20261021T141500
DTEND;TZID=Europe/Luxembourg:20261021T161500
DTSTAMP:20261009T050417Z
UID:pretalx-hack-lu-2026-ZV9EFP@pretalx.com
DESCRIPTION:### **HHAMMERRing the Noise: AI-Agentic Threat Hunting with Su
 ricata and the Power of EVE Metadata**\n\nThis workshop introduces **HHAMM
 ERR**\, a specialized threat hunting framework designed for modern detecti
 on engineering: **Hypothesis\, Hunt\, Analyze\, Modulate\, Manage\, Enhanc
 e\, Refine\, and Repeat**. Built on the philosophy of "hunt manually once
 \, automate forever\," the session demonstrates how to move beyond traditi
 onal query-based methods into cost-effective\, high-accuracy AI integratio
 n.\n\nUsing **Suricata**—the industry-standard open-source network analy
 sis engine—as the primary data source\, attendees will explore how to le
 verage its rich protocol\, flow\, and anomaly logs for deep network visibi
 lity. The workshop bridges the gap between traditional SIEM-based hunting 
 and **Agentic AI**\, focusing on building precise "AI Skills" rather than 
 simply processing massive datasets.\n\n**Key Takeaways:**\n* **Methodology
 :** Implementation of the HHAMMERR cycle to standardize hunting workflows.
 \n* **Optimization:** Techniques for building Agentic AI tools that priori
 tize data sovereignty\, performance\, and low token costs.\n* **Practical 
 Application:** Hands-on malware hunt scenarios designed to provide immedia
 te\, actionable value for blue teams.\n\nMoving past the hype of generativ
 e AI\, this session provides a pragmatic roadmap for defenders to illumina
 te perimeter blind spots and automate complex detection tasks using the Cl
 aude AI plugin ecosystem and Suricata's network security data.
LOCATION:Hollenfels
URL:https://pretalx.com/hack-lu-2026/talk/ZV9EFP/
END:VEVENT
END:VCALENDAR