chg: [EU-ATTACK slides] updated

events/20220602-EU-ATTACK/content.aux

@@ -28,44 +28,12 @@
 \@writefile{nav}{\headcommand {\beamer@framepages {13}{13}}}
 \@writefile{nav}{\headcommand {\slideentry {0}{0}{14}{14/14}{}{0}}}
 \@writefile{nav}{\headcommand {\beamer@framepages {14}{14}}}
-\@writefile{toc}{\beamer@sectionintoc {1}{Learning by examples}{15}{0}{1}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{15}{15/15}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@sectionpages {1}{14}}}
-\@writefile{nav}{\headcommand {\beamer@subsectionpages {1}{14}}}
-\@writefile{nav}{\headcommand {\sectionentry {1}{Learning by examples}{15}{Learning by examples}{0}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{1}{15/15}{}{0}}}
 \@writefile{nav}{\headcommand {\beamer@framepages {15}{15}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{2}{16/16}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {16}{16}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{3}{17/17}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {17}{17}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{4}{18/18}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {18}{18}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{5}{19/19}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {19}{19}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{6}{20/20}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {20}{20}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{7}{21/21}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {21}{21}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{8}{22/22}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {22}{22}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{9}{23/23}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {23}{23}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{10}{24/24}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {24}{24}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{11}{25/25}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {25}{25}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{12}{26/26}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {26}{26}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{13}{27/27}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {27}{27}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{14}{28/28}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {28}{28}}}
-\@writefile{nav}{\headcommand {\slideentry {1}{0}{15}{29/29}{}{0}}}
-\@writefile{nav}{\headcommand {\beamer@framepages {29}{29}}}
 \@setckpt{content}{
-\setcounter{page}{30}
+\setcounter{page}{16}
 \setcounter{equation}{0}
-\setcounter{enumi}{2}
+\setcounter{enumi}{1}
 \setcounter{enumii}{0}
 \setcounter{enumiii}{0}
 \setcounter{enumiv}{0}
@@ -75,11 +43,11 @@
 \setcounter{bookmark@seq@number}{0}
 \setcounter{lecture}{0}
 \setcounter{part}{0}
-\setcounter{section}{1}
+\setcounter{section}{0}
 \setcounter{subsection}{0}
 \setcounter{subsubsection}{0}
 \setcounter{subsectionslide}{15}
-\setcounter{framenumber}{27}
+\setcounter{framenumber}{14}
 \setcounter{figure}{0}
 \setcounter{table}{0}
 \setcounter{parentequation}{0}

events/20220602-EU-ATTACK/content.tex

@@ -31,30 +31,40 @@
 \begin{frame}
     \frametitle{Simplistic overview}
     \begin{enumerate}
-        \item User/API Interraction
+        \item \textbf{User Interacts} with MISP using the UI or API
-        \item MISP handles the request
+        \item MISP handles the request, starts \textbf{preparing data} to perform the operation
-        \item MISP executes workflows listening to the trigger
+        \item MISP checks if there are workflows \textbf{listening to the trigger}
+        \item MISP fetches enabled workflows and \textbf{executes} them
+        \item If all went fine, MISP \textbf{continue} to perform the operation
     \end{enumerate}
 \end{frame}
 
+
 \begin{frame}
     \frametitle{Terminology}
     \begin{enumerate}
         \item \textbf{workflow}: Sequence of actions to be executed
         \item \textbf{execution path}: A path composed of actions to be executed sequentially
+        \begin{itemize}
+            \item A workflow can contain more than one execution path
+        \end{itemize}
         \item \textbf{trigger}: Starting point of an \texttt{execution path}. Triggers are called when specific action are done by MISP
+        \begin{itemize}
+            \item A workflow can contain more than one trigger, but only one per type
+        \end{itemize}
     \end{enumerate}
     \begin{center}
         \includegraphics[width=1.0\linewidth]{pictures/workflow-view.png}
     \end{center}
 \end{frame}
 
+
 \begin{frame}
-    \frametitle{Workflow execution}
+    \frametitle{Workflow execution in MISP}
     \begin{enumerate}
-        \item A trigger is called
+        \item A trigger is called;
-        \item Collect workflows listening to called trigger
+        \item Collect workflows listening to called trigger;
-        \item Execute workflows in the saved order
+        \item Execute workflows in the saved order;
     \end{enumerate}
     \begin{center}
         \includegraphics[width=0.5\linewidth]{pictures/execution-order-1.png}
@@ -142,28 +152,6 @@
     \end{itemize}
 \end{frame}
 
-\begin{frame}
-    \frametitle{Workflow modules}
-    \begin{itemize}
-        \item \texttt{action} modules can be from 2 sources
-        \begin{itemize}
-            \item \texttt{\scriptsize app/Model/WorkflowModules/action/[module\_name].php}
-            \begin{itemize}
-                \item Written in PHP
-                \item They can use MISP's built-in functionalities (restsearch, enrichment, push to zmq, ...)
-                \item Faster and easier to interact with for those having internal knowledge of MISP
-            \end{itemize}
-            \item \texttt{From the misp-module service} 
-            \begin{itemize}
-                \item Written in Python
-                \item They can use any python libraries
-                \item Easier to write
-                \item New module type \texttt{action}
-            \end{itemize}
-        \end{itemize}
-        \item Both systems are \textbf{plug-and-play}
-    \end{itemize}
-\end{frame}
 
 \begin{frame}
     \frametitle{Creating a workflow with the editor}
@@ -180,180 +168,21 @@
     \end{center}
 \end{frame}
 
-\begin{frame}
-    \frametitle{Working with the editor}
-    Operations not allowed
-    \begin{itemize}
-        \item Create an execution loop
-    \end{itemize}
-    \begin{center}
-        \includegraphics[width=0.7\linewidth]{pictures/editor-not-allowed-1.png}
-    \end{center}
-    \begin{itemize}
-        \item Use the same trigger twice
-    \end{itemize}
-\end{frame}
 
-\section{Learning by examples}
 \begin{frame}
-    \frametitle{Workflow example 1}
+    \frametitle{Workflow example with ATT\&CK}
     \begin{center}
-        \includegraphics[width=0.9\linewidth]{pictures/example-1.png}
+        \includegraphics[width=0.9\linewidth]{pictures/ATT&CK-support.png}
     \end{center}
 
     \begin{enumerate}
-        \item Will the next blocking path (from another workflow) be executed?
+        \item Automatically processing phishing cases from ATT\&CK context including enrichments and publishing pipelines. 
-    \end{enumerate}
-\end{frame}
-\begin{frame}
-    \frametitle{Workflow example 1: Answers}
-    \begin{center}
-        \includegraphics[width=0.9\linewidth]{pictures/example-1.png}
-    \end{center}
-
-    \begin{enumerate}
-        \item Will the next blocking path (from another workflow) be executed?
-        \begin{itemize}
-            \item \textbf{No}. We are in a blocking path. As the execution has been stopped, no other blocking paths will be executed.
-        \end{itemize}
-    \end{enumerate}
-\end{frame}
-
-\begin{frame}
-    \frametitle{Workflow example 2}
-    \begin{center}
-        \includegraphics[width=0.9\linewidth]{pictures/example-2.png}
-    \end{center}
-
-    \begin{enumerate}
-        \item Will the next blocking path (from another workflow) be executed?
-        \item Will \texttt{Enrich Event} module be executed?
-    \end{enumerate}
-\end{frame}
-\begin{frame}
-    \frametitle{Workflow example 2: Answers}
-    \begin{center}
-        \includegraphics[width=0.7\linewidth]{pictures/example-2.png}
-    \end{center}
-
-    \begin{enumerate}
-        \item Will the next blocking path (from another workflow) be executed?
-        \begin{itemize}
-            \item \textbf{No}. Same reason that before
-        \end{itemize}
-        \item Will \texttt{Enrich Event} module be executed?
-        \begin{itemize}
-            \item \textbf{Yes}. The module is in the non-blocking path. Regardless of the result of the blocking path, it will be executed.
-        \end{itemize}
-    \end{enumerate}
-\end{frame}
-
-\begin{frame}
-    \frametitle{Workflow example 3}
-    \begin{center}
-        \includegraphics[width=0.9\linewidth]{pictures/example-3.png}
-    \end{center}
-
-    \begin{enumerate}
-        \item Will \texttt{Enrich Event} module be executed?
-        \item Will the next blocking path (from another workflow) be executed?
-    \end{enumerate}
-\end{frame}
-
-\begin{frame}
-    \frametitle{Workflow example 3: Answers}
-    \begin{center}
-        \includegraphics[width=0.55\linewidth]{pictures/example-3.png}
-    \end{center}
-
-    \begin{enumerate}
-        \item Will \texttt{Enrich Event} module be executed?
-        \begin{itemize}
-            \item \textbf{Yes}
-            \item The blocking path is executed before the non-blocking one
-            \item The result of the non-blocking path has no influence on the blocking one
-        \end{itemize}
-        \item Will the next blocking path (from another workflow) be executed?
-        \begin{itemize}
-            \item \textbf{Yes}
-            \item The blocking path is executed before the non-blocking one
-            \item The result of the non-blocking path has no influence the execution of other workflows
-        \end{itemize}
-    \end{enumerate}
-\end{frame}
-
-\begin{frame}
-    \frametitle{Workflow example 4}
-    \begin{center}
-        \includegraphics[width=0.9\linewidth]{pictures/example-4.png}
-    \end{center}
-    \begin{enumerate}
-        \item Will \texttt{Enrich Event} module be executed?
     \end{enumerate}
 \end{frame}
 
 
 \begin{frame}
-    \frametitle{Workflow example 4: Answers}
+    \frametitle{Workflow - advanced example}
-    \begin{center}
-        \includegraphics[width=0.9\linewidth]{pictures/example-4.png}
-    \end{center}
-    \begin{enumerate}
-        \item Will \texttt{Enrich Event} module be executed?
-        \begin{itemize}
-            \item \textbf{Yes} and \textbf{No}. The execution order for the same output is not guaranteed
-            \item If \texttt{Stop execution} is executed first, it's a no.
-        \end{itemize}
-    \end{enumerate}
-\end{frame}
-
-\begin{frame}
-    \frametitle{Workflow example 5}
-    \begin{center}
-        \includegraphics[width=0.9\linewidth]{pictures/example-5.png}
-    \end{center}
-    \begin{enumerate}
-        \item Will \texttt{Enrich Event} module be executed?
-    \end{enumerate}
-\end{frame}
-\begin{frame}
-    \frametitle{Workflow example 5: Answers}
-    \begin{center}
-        \includegraphics[width=0.9\linewidth]{pictures/example-5.png}
-    \end{center}
-    \begin{enumerate}
-        \item Will \texttt{Enrich Event} module be executed?
-        \begin{itemize}
-            \item \textbf{Yes}. The execution order for the same output is not guaranteed
-            \item However, as we are in a non-blocking path, the outcome of the execution of another path has no impact
-        \end{itemize}
-    \end{enumerate}
-\end{frame}
-
-\begin{frame}
-    \frametitle{Workflow example 6}
-    \begin{center}
-        \includegraphics[width=0.9\linewidth]{pictures/example-6.png}
-    \end{center}
-    \begin{enumerate}
-        \item Will \texttt{Enrich Event} module be executed?
-    \end{enumerate}
-\end{frame}
-\begin{frame}
-    \frametitle{Workflow example 6: Answers}
-    \begin{center}
-        \includegraphics[width=0.9\linewidth]{pictures/example-6.png}
-    \end{center}
-    \begin{enumerate}
-        \item Will \texttt{Enrich Event} module be executed?
-        \begin{itemize}
-            \item \textbf{No}. Even if we are in a non-blocking path, if the current execution path is blocked, the execution will be stopped
-        \end{itemize}
-    \end{enumerate}
-\end{frame}
-
-\begin{frame}
-    \frametitle{Workflow example 7}
     \vspace{-2em}
     \begin{center}
         \includegraphics[width=1.05\linewidth]{pictures/example-7.png}
@@ -361,28 +190,15 @@
     \begin{center}
         \includegraphics[width=0.45\linewidth]{pictures/event-1.png}
     \end{center}
-    \begin{enumerate}
+\end{frame}
-        \item Will \texttt{Enrich Event} module be executed?
+
-        \item Will \texttt{circl.lu} have a tag attached to it?
+\begin{frame}
-    \end{enumerate}
+    \frametitle{Ongoing developments}
-\end{frame}
+    \begin{itemize}
-\begin{frame}
+        \item First release of the workflow in MISP for the FIRST.org annual conference in Dublin (end of June).
-    \frametitle{Workflow example 7: Answers}
+        \item {\bf Workflows are shareable} and a library of workflows will be available.
-    \begin{center}
+        \item Gathering ideas and requirements for new workflows from the threat intelligence community.
-        \includegraphics[width=0.7\linewidth]{pictures/example-7.png}
+        \item Reviewing ATT\&CK techniques to be mapped in the MISP workflows.
-    \end{center}
+    \end{itemize}
-    \begin{center}
-        \includegraphics[width=0.3\linewidth]{pictures/event-1.png}
-    \end{center}
-    \begin{enumerate}
-        \item Will \texttt{Enrich Event} module be executed?
-        \begin{itemize}
-            \item \textbf{Yes}. The event contains an attribute satisfying the matching condition
-        \end{itemize}
-        \item Will \texttt{circl.lu} have a tag attached to it?
-        \begin{itemize}
-            \item \textbf{No}. The event contains an attribute satisfying the matching condition. The \texttt{else} part will not be executed.
-        \end{itemize}
-    \end{enumerate}
 \end{frame}
 

events/20220602-EU-ATTACK/slide.aux

@@ -20,10 +20,8 @@
 \@input{content.aux}
 \providecommand \oddpage@label [2]{}
 \pgfsyspdfmark {pgfid1}{1398509}{16636717}
-\BKM@entry{id=1,open,dest={4F75746C696E65302E31},srcline={197}}{4C6561726E696E67206279206578616D706C6573}
+\@writefile{nav}{\headcommand {\beamer@partpages {1}{15}}}
-\pgfsyspdfmark {pgfid29}{1398509}{17009647}
+\@writefile{nav}{\headcommand {\beamer@subsectionpages {1}{15}}}
-\@writefile{nav}{\headcommand {\beamer@partpages {1}{29}}}
+\@writefile{nav}{\headcommand {\beamer@sectionpages {1}{15}}}
-\@writefile{nav}{\headcommand {\beamer@subsectionpages {15}{29}}}
+\@writefile{nav}{\headcommand {\beamer@documentpages {15}}}
-\@writefile{nav}{\headcommand {\beamer@sectionpages {15}{29}}}
+\@writefile{nav}{\headcommand {\gdef \inserttotalframenumber {14}}}
-\@writefile{nav}{\headcommand {\beamer@documentpages {29}}}
-\@writefile{nav}{\headcommand {\gdef \inserttotalframenumber {27}}}

events/20220602-EU-ATTACK/slide.log

@@ -1,4 +1,4 @@
-This is pdfTeX, Version 3.14159265-2.6-1.40.20 (TeX Live 2019/Debian) (preloaded format=pdflatex 2021.10.14)  2 JUN 2022 06:45
+This is pdfTeX, Version 3.14159265-2.6-1.40.20 (TeX Live 2019/Debian) (preloaded format=pdflatex 2021.10.14)  2 JUN 2022 09:17
 entering extended mode
  restricted \write18 enabled.
  %&-line parsing enabled.
@@ -1295,86 +1295,86 @@ Package pdftex.def Info: pictures/geekweek75.jpg  used on input line 29.
  <./pictures/geekweek75.jpg>] [4
 
 ]
+LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/n' in size <10> not available
+
+(Font)              Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp
+ut line 59.
+LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/n' will be
+(Font)              scaled to size 10.0pt on input line 59.
+LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/n' in size <7> not available
+(Font)              Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp
+ut line 59.
+LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/n' will be
+(Font)              scaled to size 7.0pt on input line 59.
+LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/n' in size <5> not available
+(Font)              Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp
+ut line 59.
+LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/n' will be
+(Font)              scaled to size 5.0pt on input line 59.
+LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/it' in size <10> not availabl
+e
+(Font)              Font shape `T1/FiraSans-OsF/regular/it' tried instead on in
+put line 59.
+LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/it' will be
+(Font)              scaled to size 10.0pt on input line 59.
+LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/it' in size <7> not available
+
+(Font)              Font shape `T1/FiraSans-OsF/regular/it' tried instead on in
+put line 59.
+LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/it' will be
+(Font)              scaled to size 7.0pt on input line 59.
+LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/it' in size <5> not available
+
+(Font)              Font shape `T1/FiraSans-OsF/regular/it' tried instead on in
+put line 59.
+LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/it' will be
+(Font)              scaled to size 5.0pt on input line 59.
 LaTeX Font Info:    Font shape `T1/FiraMono-TOsF/m/n' in size <10.95> not avail
 able
 (Font)              Font shape `T1/FiraMono-TOsF/regular/n' tried instead on in
-put line 50.
+put line 59.
 LaTeX Font Info:    Font shape `T1/FiraMono-TOsF/regular/n' will be
-(Font)              scaled to size 10.95pt on input line 50.
+(Font)              scaled to size 10.95pt on input line 59.
 <pictures/workflow-view.png, id=57, 1493.58pt x 472.76625pt>
 File: pictures/workflow-view.png Graphic file (type png)
 <use pictures/workflow-view.png>
-Package pdftex.def Info: pictures/workflow-view.png  used on input line 50.
+Package pdftex.def Info: pictures/workflow-view.png  used on input line 59.
 (pdftex.def)             Requested size: 321.51625pt x 101.7654pt.
  [5
 
  <./pictures/workflow-view.png>]
-<pictures/execution-order-1.png, id=65, 335.2525pt x 247.92625pt>
+<pictures/execution-order-1.png, id=66, 335.2525pt x 247.92625pt>
 File: pictures/execution-order-1.png Graphic file (type png)
 <use pictures/execution-order-1.png>
-Package pdftex.def Info: pictures/execution-order-1.png  used on input line 62.
+Package pdftex.def Info: pictures/execution-order-1.png  used on input line 72.
 
 (pdftex.def)             Requested size: 160.75812pt x 118.88219pt.
 
 [6
 
  <./pictures/execution-order-1.png>]
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/n' in size <10> not available
-
-(Font)              Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp
-ut line 82.
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/n' will be
-(Font)              scaled to size 10.0pt on input line 82.
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/n' in size <7> not available
-(Font)              Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp
-ut line 82.
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/n' will be
-(Font)              scaled to size 7.0pt on input line 82.
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/n' in size <5> not available
-(Font)              Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp
-ut line 82.
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/n' will be
-(Font)              scaled to size 5.0pt on input line 82.
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/it' in size <10> not availabl
-e
-(Font)              Font shape `T1/FiraSans-OsF/regular/it' tried instead on in
-put line 82.
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/it' will be
-(Font)              scaled to size 10.0pt on input line 82.
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/it' in size <7> not available
-
-(Font)              Font shape `T1/FiraSans-OsF/regular/it' tried instead on in
-put line 82.
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/it' will be
-(Font)              scaled to size 7.0pt on input line 82.
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/it' in size <5> not available
-
-(Font)              Font shape `T1/FiraSans-OsF/regular/it' tried instead on in
-put line 82.
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/it' will be
-(Font)              scaled to size 5.0pt on input line 82.
 LaTeX Font Info:    Font shape `T1/FiraSans-OsF/b/n' in size <10> not available
 
 (Font)              Font shape `T1/FiraSans-OsF/bold/n' tried instead on input 
-line 82.
+line 92.
 LaTeX Font Info:    Font shape `T1/FiraSans-OsF/bold/n' will be
-(Font)              scaled to size 10.0pt on input line 82.
+(Font)              scaled to size 10.0pt on input line 92.
  [7
 
 ]
 <pictures/execution-order-2.png, id=79, 367.3725pt x 450.68375pt>
 File: pictures/execution-order-2.png Graphic file (type png)
 <use pictures/execution-order-2.png>
-Package pdftex.def Info: pictures/execution-order-2.png  used on input line 96.
+Package pdftex.def Info: pictures/execution-order-2.png  used on input line 106
-
+.
 (pdftex.def)             Requested size: 112.53264pt x 138.05318pt.
 <pictures/trigger-outputs.png, id=80, 594.22pt x 167.62625pt>
 File: pictures/trigger-outputs.png Graphic file (type png)
 <use pictures/trigger-outputs.png>
-Package pdftex.def Info: pictures/trigger-outputs.png  used on input line 96.
+Package pdftex.def Info: pictures/trigger-outputs.png  used on input line 106.
 (pdftex.def)             Requested size: 128.60452pt x 36.27936pt.
 
-Overfull \vbox (4.82838pt too high) detected at line 96
+Overfull \vbox (4.82838pt too high) detected at line 106
  []
 
 [8
@@ -1388,191 +1388,60 @@ Overfull \vbox (4.82838pt too high) detected at line 96
 <pictures/module-type.png, id=98, 366.36874pt x 57.21375pt>
 File: pictures/module-type.png Graphic file (type png)
 <use pictures/module-type.png>
-Package pdftex.def Info: pictures/module-type.png  used on input line 143.
+Package pdftex.def Info: pictures/module-type.png  used on input line 153.
 (pdftex.def)             Requested size: 160.75812pt x 25.10515pt.
 LaTeX Font Info:    Font shape `T1/FiraMono-TOsF/m/n' in size <10> not availabl
 e
 (Font)              Font shape `T1/FiraMono-TOsF/regular/n' tried instead on in
-put line 143.
+put line 153.
 LaTeX Font Info:    Font shape `T1/FiraMono-TOsF/regular/n' will be
-(Font)              scaled to size 10.0pt on input line 143.
+(Font)              scaled to size 10.0pt on input line 153.
 LaTeX Font Info:    Font shape `T1/FiraSans-OsF/m/n' in size <9> not available
 (Font)              Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp
-ut line 143.
+ut line 153.
 LaTeX Font Info:    Font shape `T1/FiraSans-OsF/regular/n' will be
-(Font)              scaled to size 9.0pt on input line 143.
+(Font)              scaled to size 9.0pt on input line 153.
  [11
 
  <./pictures/module-type.png>]
-LaTeX Font Info:    Font shape `T1/FiraMono-TOsF/m/n' in size <8> not available
+<pictures/editor-1.png, id=105, 1769.61125pt x 1102.1175pt>
-
-(Font)              Font shape `T1/FiraMono-TOsF/regular/n' tried instead on in
-put line 166.
-LaTeX Font Info:    Font shape `T1/FiraMono-TOsF/regular/n' will be
-(Font)              scaled to size 8.0pt on input line 166.
-LaTeX Font Info:    Font shape `T1/FiraMono-TOsF/m/n' in size <9> not available
-
-(Font)              Font shape `T1/FiraMono-TOsF/regular/n' tried instead on in
-put line 166.
-LaTeX Font Info:    Font shape `T1/FiraMono-TOsF/regular/n' will be
-(Font)              scaled to size 9.0pt on input line 166.
- [12
-
-]
-<pictures/editor-1.png, id=110, 1769.61125pt x 1102.1175pt>
 File: pictures/editor-1.png Graphic file (type png)
 <use pictures/editor-1.png>
-Package pdftex.def Info: pictures/editor-1.png  used on input line 181.
+Package pdftex.def Info: pictures/editor-1.png  used on input line 169.
 (pdftex.def)             Requested size: 321.51625pt x 200.23927pt.
 
-Overfull \vbox (62.61806pt too high) detected at line 181
+Overfull \vbox (62.61806pt too high) detected at line 169
  []
 
-[13
+[12
 
  <./pictures/editor-1.png>]
-<pictures/editor-not-allowed-1.png, id=118, 1259.70625pt x 910.40125pt>
+<pictures/ATT&CK-support.png, id=112, 1523.6925pt x 646.415pt>
-File: pictures/editor-not-allowed-1.png Graphic file (type png)
+File: pictures/ATT&CK-support.png Graphic file (type png)
-<use pictures/editor-not-allowed-1.png>
+<use pictures/ATT&CK-support.png>
-Package pdftex.def Info: pictures/editor-not-allowed-1.png  used on input line 
+Package pdftex.def Info: pictures/ATT&CK-support.png  used on input line 181.
-195.
+(pdftex.def)             Requested size: 289.36266pt x 122.75108pt.
-(pdftex.def)             Requested size: 225.06038pt x 162.64268pt.
+ [13
- [14
 
- <./pictures/editor-not-allowed-1.png>]
+ <./pictures/ATT&CK-support.png>]
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/b/sc' in size <14.4> not availa
+<pictures/example-7.png, id=120, 1809.76125pt x 734.745pt>
-ble
-(Font)              Font shape `T1/FiraSans-OsF/bold/sc' tried instead on input
- line 197.
-LaTeX Font Info:    Font shape `T1/FiraSans-OsF/bold/sc' will be
-(Font)              scaled to size 14.4pt on input line 197.
-
-Overfull \vbox (18.59999pt too high) detected at line 197
- []
-
-[15
-
-]
-<pictures/example-1.png, id=131, 1173.38374pt x 419.5675pt>
-File: pictures/example-1.png Graphic file (type png)
-<use pictures/example-1.png>
-Package pdftex.def Info: pictures/example-1.png  used on input line 207.
-(pdftex.def)             Requested size: 289.36266pt x 103.46394pt.
- [16
-
- <./pictures/example-1.png>]
-File: pictures/example-1.png Graphic file (type png)
-<use pictures/example-1.png>
-Package pdftex.def Info: pictures/example-1.png  used on input line 220.
-(pdftex.def)             Requested size: 289.36266pt x 103.46394pt.
- [17
-
-]
-<pictures/example-2.png, id=143, 1173.38374pt x 591.20876pt>
-File: pictures/example-2.png Graphic file (type png)
-<use pictures/example-2.png>
-Package pdftex.def Info: pictures/example-2.png  used on input line 232.
-(pdftex.def)             Requested size: 289.36266pt x 145.79012pt.
- [18
-
- <./pictures/example-2.png>]
-File: pictures/example-2.png Graphic file (type png)
-<use pictures/example-2.png>
-Package pdftex.def Info: pictures/example-2.png  used on input line 249.
-(pdftex.def)             Requested size: 225.06038pt x 113.39531pt.
-
-[19
-
-]
-<pictures/example-3.png, id=156, 1375.1375pt x 600.2425pt>
-File: pictures/example-3.png Graphic file (type png)
-<use pictures/example-3.png>
-Package pdftex.def Info: pictures/example-3.png  used on input line 261.
-(pdftex.def)             Requested size: 289.36266pt x 126.30193pt.
- [20
-
- <./pictures/example-3.png>]
-File: pictures/example-3.png Graphic file (type png)
-<use pictures/example-3.png>
-Package pdftex.def Info: pictures/example-3.png  used on input line 283.
-(pdftex.def)             Requested size: 176.83492pt x 77.18248pt.
- [21
-
-]
-<pictures/example-4.png, id=168, 1330.9725pt x 524.96124pt>
-File: pictures/example-4.png Graphic file (type png)
-<use pictures/example-4.png>
-Package pdftex.def Info: pictures/example-4.png  used on input line 293.
-(pdftex.def)             Requested size: 289.36266pt x 114.13008pt.
- [22
-
- <./pictures/example-4.png>]
-File: pictures/example-4.png Graphic file (type png)
-<use pictures/example-4.png>
-Package pdftex.def Info: pictures/example-4.png  used on input line 308.
-(pdftex.def)             Requested size: 289.36266pt x 114.13008pt.
-
-[23
-
-]
-<pictures/example-5.png, id=181, 1317.92375pt x 498.86375pt>
-File: pictures/example-5.png Graphic file (type png)
-<use pictures/example-5.png>
-Package pdftex.def Info: pictures/example-5.png  used on input line 318.
-(pdftex.def)             Requested size: 289.36266pt x 109.5296pt.
- [24
-
- <./pictures/example-5.png>]
-File: pictures/example-5.png Graphic file (type png)
-<use pictures/example-5.png>
-Package pdftex.def Info: pictures/example-5.png  used on input line 331.
-(pdftex.def)             Requested size: 289.36266pt x 109.5296pt.
- [25
-
-]
-<pictures/example-6.png, id=194, 1725.44624pt x 428.60126pt>
-File: pictures/example-6.png Graphic file (type png)
-<use pictures/example-6.png>
-Package pdftex.def Info: pictures/example-6.png  used on input line 341.
-(pdftex.def)             Requested size: 289.36266pt x 71.87372pt.
- [26
-
- <./pictures/example-6.png>]
-File: pictures/example-6.png Graphic file (type png)
-<use pictures/example-6.png>
-Package pdftex.def Info: pictures/example-6.png  used on input line 353.
-(pdftex.def)             Requested size: 289.36266pt x 71.87372pt.
-
-[27
-
-]
-<pictures/example-7.png, id=206, 1809.76125pt x 734.745pt>
 File: pictures/example-7.png Graphic file (type png)
 <use pictures/example-7.png>
-Package pdftex.def Info: pictures/example-7.png  used on input line 368.
+Package pdftex.def Info: pictures/example-7.png  used on input line 193.
 (pdftex.def)             Requested size: 337.59303pt x 137.05803pt.
 
-Overfull \hbox (16.07678pt too wide) in paragraph at lines 368--368
+Overfull \hbox (16.07678pt too wide) in paragraph at lines 193--193
  [] 
  []
 
-<pictures/event-1.png, id=207, 536.0025pt x 177.66376pt>
+<pictures/event-1.png, id=121, 536.0025pt x 177.66376pt>
 File: pictures/event-1.png Graphic file (type png)
 <use pictures/event-1.png>
-Package pdftex.def Info: pictures/event-1.png  used on input line 368.
+Package pdftex.def Info: pictures/event-1.png  used on input line 193.
 (pdftex.def)             Requested size: 144.68132pt x 47.95358pt.
-[28
+[14
 
- <./pictures/example-7.png> <./pictures/event-1.png>]
+ <./pictures/example-7.png> <./pictures/event-1.png>] [15
-File: pictures/example-7.png Graphic file (type png)
-<use pictures/example-7.png>
-Package pdftex.def Info: pictures/example-7.png  used on input line 387.
-(pdftex.def)             Requested size: 225.06038pt x 91.37202pt.
-File: pictures/event-1.png Graphic file (type png)
-<use pictures/event-1.png>
-Package pdftex.def Info: pictures/event-1.png  used on input line 387.
-(pdftex.def)             Requested size: 96.45586pt x 31.96996pt.
- [29
 
 ])
 \tf@nav=\write5
@@ -1596,11 +1465,11 @@ LaTeX Font Warning: Some font shapes were not available, defaults substituted.
 
  ) 
 Here is how much of TeX's memory you used:
- 27215 strings out of 481239
+ 27075 strings out of 481239
- 550858 string characters out of 5920376
+ 548433 string characters out of 5920376
- 802416 words of memory out of 5000000
+ 800370 words of memory out of 5000000
- 41737 multiletter control sequences out of 15000+600000
+ 41634 multiletter control sequences out of 15000+600000
- 897644 words of font info for 101 fonts, out of 8000000 for 9000
+ 883531 words of font info for 96 fonts, out of 8000000 for 9000
  1141 hyphenation exceptions out of 8191
  71i,16n,95p,811b,874s stack positions out of 5000i,500n,10000p,200000b,80000s
 {/usr/share/texlive/texmf-dist/fonts/enc/dvips/fira/fir_iln36p.enc}{/usr/shar
@@ -1610,10 +1479,10 @@ ts/type1/public/fira/FiraMono-Regular.pfb></usr/share/texlive/texmf-dist/fonts/
 type1/public/fira/FiraSans-Bold.pfb></usr/share/texlive/texmf-dist/fonts/type1/
 public/fira/FiraSans-Regular.pfb></usr/share/texlive/texmf-dist/fonts/type1/pub
 lic/amsfonts/symbols/msam10.pfb>
-Output written on slide.pdf (29 pages, 1195554 bytes).
+Output written on slide.pdf (15 pages, 883370 bytes).
 PDF statistics:
- 258 PDF objects out of 1000 (max. 8388607)
+ 163 PDF objects out of 1000 (max. 8388607)
- 179 compressed objects within 2 object streams
+ 110 compressed objects within 2 object streams
- 60 named destinations out of 1000 (max. 500000)
+ 31 named destinations out of 1000 (max. 500000)
- 136 words of extra memory for PDF output out of 10000 (max. 10000000)
+ 98 words of extra memory for PDF output out of 10000 (max. 10000000)
 

events/20220602-EU-ATTACK/slide.nav

@@ -26,41 +26,10 @@
 \headcommand {\beamer@framepages {13}{13}}
 \headcommand {\slideentry {0}{0}{14}{14/14}{}{0}}
 \headcommand {\beamer@framepages {14}{14}}
-\headcommand {\beamer@sectionpages {1}{14}}
+\headcommand {\slideentry {0}{0}{15}{15/15}{}{0}}
-\headcommand {\beamer@subsectionpages {1}{14}}
-\headcommand {\sectionentry {1}{Learning by examples}{15}{Learning by examples}{0}}
-\headcommand {\slideentry {1}{0}{1}{15/15}{}{0}}
 \headcommand {\beamer@framepages {15}{15}}
-\headcommand {\slideentry {1}{0}{2}{16/16}{}{0}}
+\headcommand {\beamer@partpages {1}{15}}
-\headcommand {\beamer@framepages {16}{16}}
+\headcommand {\beamer@subsectionpages {1}{15}}
-\headcommand {\slideentry {1}{0}{3}{17/17}{}{0}}
+\headcommand {\beamer@sectionpages {1}{15}}
-\headcommand {\beamer@framepages {17}{17}}
+\headcommand {\beamer@documentpages {15}}
-\headcommand {\slideentry {1}{0}{4}{18/18}{}{0}}
+\headcommand {\gdef \inserttotalframenumber {14}}
-\headcommand {\beamer@framepages {18}{18}}
-\headcommand {\slideentry {1}{0}{5}{19/19}{}{0}}
-\headcommand {\beamer@framepages {19}{19}}
-\headcommand {\slideentry {1}{0}{6}{20/20}{}{0}}
-\headcommand {\beamer@framepages {20}{20}}
-\headcommand {\slideentry {1}{0}{7}{21/21}{}{0}}
-\headcommand {\beamer@framepages {21}{21}}
-\headcommand {\slideentry {1}{0}{8}{22/22}{}{0}}
-\headcommand {\beamer@framepages {22}{22}}
-\headcommand {\slideentry {1}{0}{9}{23/23}{}{0}}
-\headcommand {\beamer@framepages {23}{23}}
-\headcommand {\slideentry {1}{0}{10}{24/24}{}{0}}
-\headcommand {\beamer@framepages {24}{24}}
-\headcommand {\slideentry {1}{0}{11}{25/25}{}{0}}
-\headcommand {\beamer@framepages {25}{25}}
-\headcommand {\slideentry {1}{0}{12}{26/26}{}{0}}
-\headcommand {\beamer@framepages {26}{26}}
-\headcommand {\slideentry {1}{0}{13}{27/27}{}{0}}
-\headcommand {\beamer@framepages {27}{27}}
-\headcommand {\slideentry {1}{0}{14}{28/28}{}{0}}
-\headcommand {\beamer@framepages {28}{28}}
-\headcommand {\slideentry {1}{0}{15}{29/29}{}{0}}
-\headcommand {\beamer@framepages {29}{29}}
-\headcommand {\beamer@partpages {1}{29}}
-\headcommand {\beamer@subsectionpages {15}{29}}
-\headcommand {\beamer@sectionpages {15}{29}}
-\headcommand {\beamer@documentpages {29}}
-\headcommand {\gdef \inserttotalframenumber {27}}

events/20220602-EU-ATTACK/slide.toc

@@ -1 +0,0 @@
-\beamer@sectionintoc {1}{Learning by examples}{15}{0}{1}