diff --git a/x.16-misp-military-use-cases/attack-screenshot.png b/x.16-misp-military-use-cases/attack-screenshot.png new file mode 100644 index 0000000..44cf2ff Binary files /dev/null and b/x.16-misp-military-use-cases/attack-screenshot.png differ diff --git a/x.16-misp-military-use-cases/bankaccount.png b/x.16-misp-military-use-cases/bankaccount.png new file mode 100644 index 0000000..94eb5cc Binary files /dev/null and b/x.16-misp-military-use-cases/bankaccount.png differ diff --git a/x.16-misp-military-use-cases/bankview.png b/x.16-misp-military-use-cases/bankview.png new file mode 100644 index 0000000..ce629c1 Binary files /dev/null and b/x.16-misp-military-use-cases/bankview.png differ diff --git a/x.16-misp-military-use-cases/circl.png b/x.16-misp-military-use-cases/circl.png new file mode 100644 index 0000000..c570ff2 Binary files /dev/null and b/x.16-misp-military-use-cases/circl.png differ diff --git a/x.16-misp-military-use-cases/content.aux b/x.16-misp-military-use-cases/content.aux new file mode 100644 index 0000000..142ab55 --- /dev/null +++ b/x.16-misp-military-use-cases/content.aux @@ -0,0 +1,66 @@ +\relax +\providecommand\hyper@newdestlabel[2]{} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{1}{1/1}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {1}{1}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{2}{2/2}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {2}{2}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{3}{3/3}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {3}{3}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{4}{4/4}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {4}{4}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{5}{5/5}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {5}{5}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{6}{6/6}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {6}{6}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{7}{7/7}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {7}{7}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{8}{8/8}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {8}{8}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{9}{9/9}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {9}{9}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{10}{10/10}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {10}{10}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{11}{11/11}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {11}{11}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{12}{12/12}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {12}{12}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{13}{13/13}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {13}{13}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{14}{14/14}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {14}{14}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{15}{15/15}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {15}{15}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{16}{16/16}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {16}{16}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{17}{17/17}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {17}{17}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{18}{18/18}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {18}{18}}} +\@writefile{nav}{\headcommand {\slideentry {0}{0}{19}{19/19}{}{0}}} +\@writefile{nav}{\headcommand {\beamer@framepages {19}{19}}} +\@setckpt{content}{ +\setcounter{page}{20} +\setcounter{equation}{0} +\setcounter{enumi}{0} +\setcounter{enumii}{0} +\setcounter{enumiii}{0} +\setcounter{enumiv}{0} +\setcounter{footnote}{5} +\setcounter{mpfootnote}{0} +\setcounter{beamerpauses}{1} +\setcounter{bookmark@seq@number}{0} +\setcounter{lecture}{0} +\setcounter{part}{0} +\setcounter{section}{0} +\setcounter{subsection}{0} +\setcounter{subsubsection}{0} +\setcounter{subsectionslide}{19} +\setcounter{framenumber}{18} +\setcounter{figure}{0} +\setcounter{table}{0} +\setcounter{parentequation}{0} +\setcounter{theorem}{0} +\setcounter{lstnumber}{1} +\setcounter{section@level}{0} +\setcounter{lstlisting}{0} +} diff --git a/x.16-misp-military-use-cases/content.log b/x.16-misp-military-use-cases/content.log new file mode 100644 index 0000000..689a186 --- /dev/null +++ b/x.16-misp-military-use-cases/content.log @@ -0,0 +1,36 @@ +This is pdfTeX, Version 3.14159265-2.6-1.40.20 (TeX Live 2019/Debian) (preloaded format=pdflatex 2024.3.16) 7 MAY 2024 14:46 +entering extended mode + restricted \write18 enabled. + %&-line parsing enabled. +**content.tex +(./content.tex +LaTeX2e <2020-02-02> patch level 2 +L3 programming layer <2020-02-14> + +! LaTeX Error: Missing \begin{document}. + +See the LaTeX manual or LaTeX Companion for explanation. +Type H for immediate help. + ... + +l.4 \begin{frame}[ + t,plain] +? +! Emergency stop. + ... + +l.4 \begin{frame}[ + t,plain] +You're in trouble here. Try typing to proceed. +If that doesn't work, type X to quit. + + +Here is how much of TeX's memory you used: + 17 strings out of 481239 + 522 string characters out of 5920377 + 236563 words of memory out of 5000000 + 15384 multiletter control sequences out of 15000+600000 + 532338 words of font info for 24 fonts, out of 8000000 for 9000 + 1141 hyphenation exceptions out of 8191 + 12i,0n,15p,79b,20s stack positions out of 5000i,500n,10000p,200000b,80000s +! ==> Fatal error occurred, no output PDF file produced! diff --git a/x.16-misp-military-use-cases/content.tex b/x.16-misp-military-use-cases/content.tex new file mode 100755 index 0000000..5718f36 --- /dev/null +++ b/x.16-misp-military-use-cases/content.tex @@ -0,0 +1,206 @@ +% DO NOT COMPILE THIS FILE DIRECTLY! +% This is included by the other .tex files. + +\begin{frame}[t,plain] +\titlepage +\end{frame} + +\begin{frame} + \frametitle{MISP and Starting from a Practical Use-Case} + \begin{itemize} + \item In 2012, during a malware analysis workgroup, we realized that multiple analysts were working independently on the same malware. + \item To streamline our efforts and avoid redundancy, we sought a {\bf method for easy and automated information sharing}. + \item Christophe Vandeplas, then employed at the Belgian Ministry of Defense, presented his preliminary work on what would eventually evolve into the MISP platform. + \item An initial version of the MISP platform was adopted by the MALWG, and the valuable feedback from users fueled further development and enhancements. + \item Today, MISP has grown into a platform driven by {\bf community development}. + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{about CIRCL} + The Computer Incident Response Center Luxembourg (CIRCL)\footnote{\url{https://www.circl.lu/}} is a government-driven initiative designed to provide a systematic response facility to computer security threats and incidents. CIRCL is the CERT for the private sector, communes and non-governmental entities in Luxembourg and is operated by Luxembourg House of Cybersecurity (LHC) g.i.e. +\end{frame} + +\begin{frame} +\frametitle{MISP and CIRCL} +\begin{itemize} + \item CIRCL is mandated by the Ministry of Economy and acting as the Luxembourg National CERT for private sector (under the NIS directive). +\item CIRCL leads the development of the Open Source MISP threat intelligence platform which is used by many military or intelligence communities, private companies, financial sector, National CERTs and LEAs globally. +\item {\bf CIRCL runs multiple large MISP communities performing active daily threat-intelligence sharing}. +\end{itemize} + \includegraphics{en_cef.png} +\end{frame} + +\begin{frame} + \frametitle{What is MISP? (core software)} +\begin{itemize} + \item MISP is a {\bf threat information sharing} platform that is free \& open source software + \item A tool that {\bf collects} information from partners, your analysts, your tools, feeds + \item Normalises, {\bf correlates}, {\bf enriches} the data + \item Allows teams and communities to {\bf collaborate} + \item {\bf Feeds} automated protective tools and analyst tools with the output +\end{itemize} +\end{frame} + +\begin{frame} + \frametitle{MISP Project Overview} + \includegraphics[scale=0.35]{misp-overview-simplified.pdf} +\end{frame} + +\begin{frame} +\frametitle{Development based on practical user feedback} +\begin{itemize} +\item There are many different types of users of an information sharing platform like MISP: + \begin{itemize} + \item {\bf Malware reversers} willing to share indicators of analysis with respective colleagues. + \item {\bf Security analysts} searching, validating and using indicators in operational security. + \item {\bf Intelligence analysts} gathering information about specific adversary groups. + \item {\bf Law-enforcement} relying on indicators to support or bootstrap their DFIR cases. + \item {\bf Risk analysis teams} willing to know about the new threats, likelyhood and occurences. + \item {\bf Fraud analysts} willing to share financial indicators to detect financial frauds. + \end{itemize} +\end{itemize} +\end{frame} + +%\begin{frame} +%\frametitle{MISP model of governance} +%\begin{center} +%\includegraphics[scale=0.2]{governance.png} +%\end{center} +%\end{frame} + +\begin{frame} +\frametitle{Many objectives from different user-groups} + \begin{itemize} + \item Sharing indicators/selectors for a {\bf detection} matter. + \begin{itemize} + \item 'Do I have infected systems in my infrastructure or the ones I operate?' + \end{itemize} + \item Sharing indicators to {\bf block}. + \begin{itemize} + \item 'I use these attributes to block, sinkhole or divert traffic.' + \end{itemize} + \item Sharing indicators to {\bf perform intelligence}. + \begin{itemize} + \item 'Gathering information about campaigns and attacks. Are they related? Who is targeting me? Who are the adversaries?' + \end{itemize} + \item $\rightarrow$ These objectives can be conflicting (e.g. False-positives have different impacts) + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Communities using MISP} + \begin{itemize} + \item Communities are groups of users sharing within a set of common objectives/values. + \item CIRCL operates multiple MISP instances with a significant user base (more than 1200 organizations with more than 4000 users). + \item {\bf Trusted groups} running MISP communities in island mode (air gapped system) or partially connected mode. + \item {\bf Financial sector} (banks, ISACs, payment processing organizations) use MISP as a sharing mechanism. + \item {\bf Military and international organizations} (NATO, military CSIRTs, n/g CERTs,...). + \item {\bf Security vendors} running their own communities (e.g. Fidelis) or interfacing with MISP communities (e.g. OTX). + \item {\bf Topical communities} set up to tackle individual specific issues (COVID-19 MISP) + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{NATO and MISP Communities} + \begin{center} + \includegraphics[scale=0.5]{misp-flows.png} + \end{center} +\end{frame} + +\begin{frame} + \frametitle{Evolving Military Use Cases with MISP} + \begin{itemize} + \item MISP's versatile standard\footnote{\url{https://www.misp-standard.org/}} seamlessly integrates with military protocols, enhancing interoperability. + \item Supports diverse intelligence inputs, including {\bf HUMINT} (Human Intelligence), {\bf SIGINT} (Signals Intelligence), and {\bf OSINT} (Open Source Intelligence), within the MISP framework. + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{SIGINT - MISP Integration with SigMF} + \begin{itemize} + \item MISP has added support for the Signal Metadata Format Specification (SigMF)\footnote{\url{https://www.misp-project.org/2023/08/23/MISP_now_supports_Signal_Metadata_Format_Specification_SigMF.html/}}, used widely in {\bf software-defined radio and signal processing}. + \item New SigMF-related object templates introduced: + \begin{itemize} + \item SigMF Recording + \item SigMF Archive + \item SigMF Expanded Recording + \end{itemize} + \item Enrichment features in MISP allow expansion of SigMF recordings, aiding in data analysis and integration of signal metadata into MISP attributes. + \item This integration facilitates improved search capabilities and data analysis within MISP. + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{SIGINT - MISP Integration with SigMF} +\begin{center} + \includegraphics[scale=0.3]{waterfall.png} +\end{center} +\end{frame} + +\begin{frame} + \frametitle{HUMINT - MISP Versatile Objects} + \begin{itemize} + \item The MISP standard is extensible; objects can be easily created to cover specific use cases. + \item Military organizations often have their own unique data models. + \item The MISP standard includes 344\footnote{\url{https://www.misp-project.org/objects.html}} default object templates, many of which are applicable to HUMINT. + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{HUMINT - MISP versatile objects} +\begin{center} + \includegraphics[scale=0.3]{gru-1.png} +\end{center} +\end{frame} + +\begin{frame} + \frametitle{Attribution and Threat Actors} +\begin{itemize} + \item MISP includes a default knowledge base known as MISP Galaxies\footnote{\url{https://www.misp-galaxy.org/}}, + \item For instance, the Threat Actor galaxy contains an officially maintained list of Threat Actors. + \item Military organizations often have their own methods of attribution or adaptations from existing models. + \item MISP allows users to fork and maintain their own perspectives on threat actors. +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Sharing in MISP} + \begin{itemize} + \item Sharing via distribution lists - {\bf Sharing groups} + \item {\bf Delegation} for pseudo-anonymised information sharing + \item {\bf Proposals} and {\bf Extended events} for collaborated information sharing + \item Synchronisation, Feed system, air-gapped sharing + \item User defined {\bf filtered sharing} for all the above mentioned methods + \item Cross-instance information {\bf caching} for quick lookups of large data-sets + \item Support for multi-MISP internal enclaves + \end{itemize} +\end{frame} + + +\begin{frame} +\frametitle{Information quality management} + \begin{itemize} + \item Correlating data + \item Feedback loop from detections via {\bf Sightings} + \item {\bf False positive management} via the warninglist system + \item {\bf Enrichment system} via MISP-modules + \item {\bf workflow} system to review and control information publication + \item {\bf Integrations} with a plethora of tools and formats + \item Flexible {\bf API} and support {\bf libraries} such as PyMISP to ease integration + \item {\bf Timelines} and giving information a temporal context + \item Full chain for {\bf indicator life-cycle management} + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Conclusion} + \begin{itemize} + \item \textbf{Information sharing practices are derived from usage} and exemplified through learning by imitation from shared information. + \item MISP is fundamentally a tool. The key is your sharing and analyst practices, which should find the tool transparent and supportive. + \item Enable military users to customize MISP to meet their community's specific use cases. + \item The MISP project combines open-source software, open standards, best practices, and communities to facilitate effective information sharing. + \end{itemize} +\end{frame} + + diff --git a/x.16-misp-military-use-cases/content_es.tex b/x.16-misp-military-use-cases/content_es.tex new file mode 100755 index 0000000..631355f --- /dev/null +++ b/x.16-misp-military-use-cases/content_es.tex @@ -0,0 +1,165 @@ +% DO NOT COMPILE THIS FILE DIRECTLY! +% This is included by the other .tex files. + +\begin{frame}[t,plain] +\titlepage +\end{frame} + +\begin{frame} + \frametitle{MISP, comenzando desde un caso práctico} + \begin{itemize} + \item Durante un taller de análisis de malware en 2012, descubrimos que habíamos estado trabajando analizando el mismo malware. + \item Quisimos compartir información de forma fácil y automatizada para así {\bf evitar la duplicación de trabajo}. + \item Christophe Vandeplas (trabajando en el CERT del MINDEF Belga en aquel entonces) nos mostró su trabajo en una plataforma que luego se convertiría en MISP. + \item Una primera versión de MISP fue utilizada por el MALWG y {\bf los comentarios de los usuarios} nos ayudaron a realizar mejoras en la plataforma. + \item Actualmente MISP es {\bf un desarrollo impulsado por la comunidad}. + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Acerca de CIRCL} +El Centro de Respuesta ante Emergencias Informáticas de Luxemburgo (CIRCL) es una iniciativa impulsada por el gobierno, diseñada para proveer una respuesta sistemática a incidentes y amenazas de seguridad informática. +\linebreak +\linebreak +CIRCL es el CERT del sector privado, municipios y entidades no gubernamentales en Luxemburgo y es operado por LHC g.i.e. +\end{frame} + +\begin{frame} +\frametitle{MISP y CIRCL} +\begin{itemize} +\item CIRCL es conducido por el Ministerio de Economía y actúa como el CERT Nacional para el sector privado. +\item CIRCL lidera el desarrollo de MISP, la plataforma de código abierto de inteligencia de amenazas, que es utilizada por muchas comunidades militares o de inteligencia, empresas privadas, sector financiero, CERTs nacionales y fuerzas de seguridad (LEAs) en todo el mundo. +\item {\bf CIRCL opera múltiples comunidades de MISP, que a diario comparten información de inteligencia de amenazas (threat-intelligence)}. +\end{itemize} + \includegraphics{en_cef.png} +\end{frame} + +\begin{frame} +\frametitle{¿Qué es MISP?} +\begin{itemize} + \item MISP es una plataforma libre y de código abierto para el {\bf intercambio de información de amenazas}. + \item Es una herramienta que {\bf recolecta} información proveniente de diferentes participantes, sus analistas, sus herramientas, fuentes de inteligencia, etc. + \item Normaliza, {\bf correlaciona} y {\bf enriquece} la información. + \item Permite {\bf colaborar} a los diferentes equipos y comunidades. + \item {\bf Alimenta} las herramientas de seguridad y de los analistas con sus resultados. +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Desarrollo basado en comentarios de los usuarios} +\begin{itemize} +\item Existen muchos diferentes tipos de usuarios de plataformas de intercambio de información como MISP: + \begin{itemize} + \item {\bf Analistas de Malware} dispuestos a compartir indicadores de compromiso con sus respectivos colegas. + \item {\bf Analistas de Seguridad} buscando, validando y utilizando indicadores en seguridad operacional. + \item {\bf Analistas de Inteligencia} recopilando información acerca de ciertos grupos de adversarios. + \item {\bf Fuerzas de Seguridad} utilizando indicadores para dar soporte a casos de análisis forense digital (DFIR). + \item {\bf Equipos de Análisis de Riesgos} dispuestos a saber más sobre nuevas amenazas, probabilidades e incidencias. + \item {\bf Analistas de Fraude} dispuestos a compartir indicadores financieros para detectar fraudes. + \end{itemize} +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Modelo de gobernabilidad de MISP} +\begin{center} +\includegraphics[scale=0.2]{governance.png} +\end{center} +\end{frame} + +\begin{frame} +\frametitle{Múltiples objetivos según diferentes grupos de usuarios} + \begin{itemize} + \item Compartiendo indicadores para la {\bf detección}. + \begin{itemize} + \item '¿Existen sistemas infectados en mi infraestructura o en las redes que opero?' + \end{itemize} + \item Compartiendo indicadores para {\bf bloquear}. + \begin{itemize} + \item 'Utilizo estos indicadores para bloquear el acceso o redireccionar el tráfico.' + \end{itemize} + \item Compartiendo indicadores para {\bf realizar actividades de inteligencia}. + \begin{itemize} + \item 'Recopilando información acerca de campañas y ataques. ¿Están relacionados? ¿Quién me tiene como objetivo? ¿Quiénes son los adversarios?' + \end{itemize} + \item $\rightarrow$ Estos objetivos pueden ser contradictorios (p. ej. Los falsos-positivos tienen diferentes impactos) + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Comunidades utilizando MISP} + \begin{itemize} + \item Las comunidades son grupos de usuarios que comparten un conjunto objetivos o valores comunes. + \item CIRCL opera múltiples instancias de MISP con una gran cantidad de usuarios (más de 1200 organizaciones con más de 4000 usuarios). + \item {\bf Grupos de confianza} operando comunidades de MISP en modo aislado (air-gapped) o parcialmente conectados. + \item {\bf Sector financiero} (bancos, Centros de Análisis e Intercambio de Información (ISACs), organizaciones de procesamiento de pagos) utilizan MISP como mecanismo de intercambio. + \item {\bf Organizaciones internacionales y militares} OTAN, CSIRTs militares, CERTs, ... + \item {\bf Proveedores de Seguridad} operando sus propias comunidades o interconectados con otras comunidades. + \item {\bf Comunidades temáticas} creadas para abordar problemáticas específicas (COVID-19 MISP) + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Las dificultades de compartir información} + \begin{itemize} + \item Las dificultades de compartir información no suelen ser problemas de índole tecnológico, en general se deben a las {\bf interacciones sociales} (p. ej. {\bf confianza}). + \item Restricciones legales\footnote{\url{https://www.misp-project.org/compliance/}} + \begin{itemize} + \item "Nuestro marco legal no nos permite compartir información." + \item "El riesgo de filtraciones de información es muy alto y riesgoso para nuestra organización y nuestros socios." + \end{itemize} + \item Restricciones prácticas + \begin{itemize} + \item "No tenemos información para compartir." + \item "No tenemos tiempo para procesar o contribuir con indicadores." + \item "Nuestro modelo de clasificación no se ajusta al modelo de MISP." + \item "Las herramientas para intercambio de información están asociadas a un formato específico, nosotros utilizamos otro." + \end{itemize} + \end{itemize} +\end{frame} + + +\begin{frame} + \frametitle{Vista general del Proyecto MISP} + \includegraphics[scale=0.35]{misp-overview-simplified.pdf} +\end{frame} + +\begin{frame} +\frametitle{Compartiendo en MISP} + \begin{itemize} + \item Compartiendo vía listas de distribución - {\bf Grupos de intercambio} (sharing groups) + \item {\bf Delegación} para intercambio de información pseudo-anonimizada + \item {\bf Propuestas} y {\bf Eventos extendidos} para compartir información en forma colaborativa + \item Sincronización, Fuentes (feeds), intercambio aislado (air-gapped) + \item {\bf Filtros de intercambio } definidos por el usuario para todos los métodos mencionados anteriormente + \item {\bf Almacenamiento en caché} para búsquedas rápidas en grandes volúmenes de datos + \item Soporte de múltiples instancias de MISP para enclaves internas + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Gestión de la calidad de la Información} + \begin{itemize} + \item Información correlacionada + \item Ciclo de retroalimentación de detecciones vía {\bf Avistamientos} (Sightings) + \item {\bf Gestión de falsos positivos} vía el sistema de alertas (warninglists) + \item Sistema de {\bf enriquecimiento} vía MISP-modules + \item Sistema de {\bf flujos de trabajo} para revisar y controlar la información que se publica + \item {\bf Integraciones} con un gran número de herramientas y formatos + \item {\bf API} flexible y soporte de {\bf librerías} tales como PyMISP para facilitar la integración + \item {\bf Líneas de tiempo} (timelines) para dotar a la información de un marco temporal + \item Cadena completa de la {\bf gestión del ciclo de vida de indicadores} + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Conclusión} + \begin{itemize} + \item {\bf Las prácticas de intercambio de información vienen con su uso} y con el ejemplo (p. ej. aprender mediante la imitación de la información compartida). + \item MISP es sólo una herramienta. Lo que importa son sus prácticas de intercambio. La herramienta debería darle soporte de la manera más transparente posible. + \item Permitir a los usuarios customizar MISP para satisfacer las necesidad de los casos de uso de su comunidad. + \item El proyecto MISP combina código abierto, estándares abiertos, mejores prácticas y comunidades para convertir el intercambio de información en una realidad. + \end{itemize} +\end{frame} + + diff --git a/x.16-misp-military-use-cases/content_nl.tex b/x.16-misp-military-use-cases/content_nl.tex new file mode 100755 index 0000000..2553bb5 --- /dev/null +++ b/x.16-misp-military-use-cases/content_nl.tex @@ -0,0 +1,314 @@ +% DO NOT COMPILE THIS FILE DIRECTLY! +% This is included by the other .tex files. + +\begin{frame}[t,plain] +\titlepage +\end{frame} + +\begin{frame}{Agenda} + \input{../includes/agenda.txt} +\end{frame} + +\begin{frame} + \frametitle{MISP, bekeken vanuit een praktisch voorbeeld} + \begin{itemize} + \item In 2012 werd tijdens een werkgroep voor malware analyse duidelijk dat we werkten aan de analyse van dezelfde malware. + \item We wilden onze informatie op een eenvoudige en geautomatiseerde manier met elkaar delen {\bf om dubbel werk te voorkomen}. + \item Christophe Vandeplas (toen werkzaam bij het CERT voor de Belgische Defensie) toonde ons zijn werk aan een platform dat uiteindelijk MISP werd. + \item De eerste versie van het MISP-platform werd gebruikt door de MALWG en met hulp van {\bf de toenemende feedback van gebruikers} konden we een verbeterd platform bouwen. + \item MISP is nu uitgegroeid tot een platform waar de {\bf ontwikkeling gestuurd wordt vanuit de gemeenschap}. + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{over CIRCL} +Het Computer Incident Response Centre Luxembourg (CIRCL) is een overheids initiatief om een antwoord te bieden op computerbeveiligingsbedreigingen en -incidenten. \break \newline +CIRCL is het CERT voor de particuliere sector, gemeenten en niet-gouvernementele entiteiten in Luxemburg en wordt beheerd door securitymadein.lu g.i.e. +\end{frame} + +\begin{frame} +\frametitle{MISP en CIRCL} +\begin{itemize} +\item CIRCL is gemandateerd door het ministerie van Economische Zaken en treedt op als het Luxemburgse nationale CERT voor de particuliere sector. +\item CIRCL leidt de ontwikkeling van het Open Source MISP-platform voor het delen van dreigingsinformatie. Dit platform is wereldwijd gebruikt door veel militaire en inlichtingengemeenschappen, privébedrijven, de financiële sector, nationale CERT's en LEA's. +\item {\bf CIRCL beheert meerdere grote MISP-gemeenschappen die dagelijkse actief zijn in het delen van dreigingsinformatie}. +\end{itemize} + \includegraphics{en_cef.png} +\end{frame} + + +\begin{frame} +\frametitle{Ontwikkeling gebaseerd op praktische feedback van de gebruikers} +\begin{itemize} +\item Er zijn veel verschillende soorten gebruikers van een informatie-uitwisselingsplatform zoals MISP: + \begin{itemize} + \item {\bf Malware-analysten} die bereid zijn om de indicatoren van hun analyse met collega's te delen. + \item {\bf Beveiligingsanalisten} die voor operationele beveiliging zoeken naar indicatoren, deze valideren en gebruiken. + \item {\bf Informatie-analysten} die informatie verzamelen over specifieke vijandige groepen. + \item De {\bf politie} die vertrouwt op indicatoren om digitale onderzoeken te ondersteunen of op te starten. + \item {\bf Risico analyse teams} die meer willen weten over nieuwe dreigingen, de waarschijnlijkheid van deze dreigingen en of deze dreigingen werden vastgesteld. + \item {\bf Fraude analysten} die bereid zijn om indicatoren te delen om financiële fraude op te sporen. + \end{itemize} +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Het beheermodel van MISP} +\includegraphics[scale=0.4]{governance.png} +\end{frame} + +\begin{frame} +\frametitle{Verschillende objectieven} + \begin{itemize} + \item Delen van indicatoren voor {\bf detectie} doeleinden. + \begin{itemize} + \item 'Heb ik geïnfecteerde systemen in mijn infrastructuur of onder mijn beheer?' + \end{itemize} + \item Delen van indicatoren om te {\bf blokkeren}. + \begin{itemize} + \item 'Ik gebruik deze attributen om verkeer te blokkeren of om verkeer om te leiden.' + \end{itemize} + \item Delen van indicatoren om {\bf informatie te verzamelen}. + \begin{itemize} + \item 'Informatie verzamelen over campagnes en aanvallen. Zijn deze campagnes met elkaar verbonden? Zijn ze gericht op mij? Wie zijn de tegenstanders?' + \end{itemize} + \item $\rightarrow$ Deze doelstellingen kunnen soms tegenstrijdig zijn + \end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Moeilijkheden bij het delen} + \begin{itemize} + \item De problemen met het delen van informatie zijn vaak niet zozeer van technische aard maar eerder een kwestie van {\bf sociale interacties} (b.v. {\bf vertrouwen}). + \item Juridische restricties\footnote{\url{https://www.misp-project.org/compliance/}} + \begin{itemize} + \item "Ons wettelijk kader staat ons niet toe om informatie te delen." + \item "Het risico op een informatielek is te hoog en het is te riskant voor onze organisatie of partners." + \end{itemize} + \item Praktische beperkingen + \begin{itemize} + \item "We hebben geen informatie om te delen." + \item "We hebben geen tijd om indicatoren te verwerken of om er te delen." + \item "Ons classificatie model past niet in uw model." + \item "De middelen voor het delen van informatie zijn gebonden aan een specifiek formaat en we gebruiken een ander formaat." + \end{itemize} + \end{itemize} +\end{frame} + + +\begin{frame} + \frametitle{MISP Project Overzicht} + \includegraphics[scale=0.35]{misp-overview-simplified.pdf} +\end{frame} + +%\begin{frame} +% \frametitle{MISP Project Overview} +% \begin{columns}[t] +% \column{5.0cm} +% \begin{figure} +% \includegraphics[scale=0.20]{misp-overview.pdf}\\ +% \end{figure} +% \column{7cm} +% \begin{itemize} +% \item The {\bf core project}\footnote{\url{http://github.com/MISP/}} (PHP/Python3) supports the backend, API \& UI. +% \item Modules (Python3) expand MISP functionalities. +% \item Taxonomies (JSON) to add categories \& global tagging. +% \item Warning-lists (JSON) help analysts to detect potential false-positives. +% \item Galaxy (JSON) to add threat-actors, tools or "intelligence". +% \item Objects (JSON) to allow for templated composition of security related atomic points of information. +% \end{itemize} +% \end{columns} +%\end{frame} + +\begin{frame} + \frametitle{MISP functies} + \begin{itemize} + \item MISP\footnote{\url{https://github.com/MISP/MISP}} is open source software voor het delen van dreigings-informatie. + \item MISP heeft {\bf een groot aantal functionaliteiten} die gebruikers ondersteunen bij het maken, samen werken aan en het delen van bedreigingsinformatie - bijv. flexibele groepen voor het delen van informatie, {\bf automatische correlatie van gegevens}, importhulp, event distributie en voorstelling voor verbetering van attributen. + \item Er is ondersteuning voor diverse formaten van IDS / IPS systemen (b.v. Suricata, Bro, Snort), SIEMs (b.v. CEF), host scanners (b.v. OpenIOC, STIX, CSV, yara), analyse tools (b.v. Maltego) of om DNS policies te implementeren (b.v. RPZ). + \item Er is een breed aanbod aan MISP modules\footnote{\url{https://www.github.com/MISP/misp-modules}} voor uitbreiding, import en export functionaliteiten. + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Correlaties : een hulpmiddel voor analysten} + \includegraphics[scale=0.18]{screenshots/campaign.png} + \begin{itemize} + \item Voor het {\bf bevestigen van een bevinding} (b.v. is dit dezelfde campagne?), {\bf of een analyse} (b.v. hebben andere analysten dezelfde hypothesis?), {\bf bevestigen van een specifiek aspect} (b.v. werden deze sinkhole IP adressen gebruikt voor een campagne?) of het simpelweg uitzoeken of een {\bf dreiging nieuw of onbekend is in je omgeving}. + \end{itemize} +\end{frame} + + +\begin{frame} + \frametitle{Groepen die MISP gebruiken} + \begin{itemize} + \item In het algemeen gaan gebruikers informatie delen met een groep met dezelfde objectieven of waarden. + \item CIRCL beheert meerdere MISP-instanties met een aanzienlijke gebruikersbasis (meer dan 950 organisaties met meer dan 2400 gebruikers). + \item {\bf Vertrouwde} (gesloten) groepen die MISP gebruiken in een soort "eiland" modus (als een geïsoleerd systeem) of als een deels geconnecteerd systeem. + \item De {\bf financiële sector} (banken, ISACs, organisaties die betalingen verwerken) gebruikt MISP als een mechanisme voor het delen van informatie. + \item {\bf Militaire en internationale organisaties} (NATO, militaire CSIRTs, n/g CERTs,...). + \item {\bf Security bedrijven} die hun eigen gemeenschap starten (b.v. Fidelis) of een koppeling hebben met een MISP gemeenschap (b.v. OTX). + \end{itemize} +\end{frame} + + +\begin{frame} +\frametitle{MISP basisfuncties voor gedistribueerd delen} +\begin{itemize} +\item De kernfunctionaliteit van MISP is het delen van informatie waarbij iedereen zowel een consument als een producent (bijdrager) kan zijn. +\item Dit heeft als voordeel dat iedereen snel kan deelnemen, zonder de directe verplichting om zelf bij te dragen. +\item Er is een lage drempel om het systeem te leren kennen. +\end{itemize} +\includegraphics[scale=0.9]{misp-distributed.pdf} +\end{frame} + + +\begin{frame} + \frametitle{Events, Objecten en Attributen in MISP} + \begin{itemize} + \item Een MISP event is een verzameling van contextueel verbonden informatie. + \item Attributen\footnote{attributen kunnen alles zijn zolang ze bijdragen aan het beschrijven van de intentie van het event, b.v. indicatoren, kwetsbaarheden ... } starten initieel met een standaard groep van "cyber security" indicatoren. + \item Attributen zijn puur {\bf gebaseerd op gebruik}. De verbetering gebeuren voornamelijk op basis van praktische noden ({\bf financiële indicatoren} in versie 2.4). + \item Objecten zijn samengestelde attributen die verschillende datapunten beschrijven, opgebouwd uit templates van de gemeenschap en de gebruikers. + \item Galaxies zorgen voor een granulaire context, classificatie en categorisatie van de gegevens gebaseerd op {\bf dreigings actoren}, {\bf preventie maatregelen} en de hulpmiddelen gebruikt door tegenstanders. + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Delen van Technieken van Aanvallers} + \begin{itemize} + \item MISP heeft integratie op zowel event als attribuut niveau voor MITRE's Adversarial Tactics, Techniques, and Common Knowledge (ATT\&CK). + \end{itemize} + \includegraphics[scale=0.2]{screenshots/attack-screenshot.png} +\end{frame} + +\begin{frame} + \frametitle{Ondersteuning voor een specifiek datamodel} + \includegraphics[scale=0.24]{screenshots/bankaccount.png} + \includegraphics[scale=0.18]{screenshots/bankview.png} +\end{frame} + +\begin{frame} + \frametitle{Terminilogie van indicatoren} + \begin{itemize} + \item Indicatoren\footnote{IoC (Indicator of Compromise) zijn een onderdeel van de indicatoren} + \begin{itemize} + \item Indicatoren beschrijven een patroon dat kan gebruikt worden om verdachte of kwaadaardige traffiek te detecteren. + \end{itemize} + \item Attributen in MISP kunnen netwerk indicatoren (b.v. IP adressen), systeem indicatoren (b.v. tekst in het geheugen) of zelfs bank gegevens zijn. + \begin{itemize} + \item Een {\bf type} (b.v. MD5, url) is hoe een attribuut is beschreven. + \end{itemize} + \begin{itemize} + \item Een attribuut behoort altijd tot een categorie (b.v. Payload delivery). Deze categorie plaatst het attribuut in een bepaalde context. + \begin{itemize} + \item {\bf Een categorie bepaalt de context } van een attribuut. + \end{itemize} + \item De IDS instelling op een attribuut bepaald of {\bf dit attribuut automatisch} zal gebruikt worden voor {\bf detectie} doeleinden. + \end{itemize} + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Ondersteuning voor het werken met MISP} + \begin{itemize} + \item Gebruikers kunnen events of attributen bijvoegen via zowel de web interface, de API als via een vrije tekst veld. + \begin{itemize} + \item Er zijn modules in Viper (een framework voor het analyseren van malware) om data in MISP in te vullen, via de vty of via IDA. + \end{itemize} + \item Een bijdrage kan gebeuren door rechtstreeks een event aan te maken maar gebruikers kunnen ook de eigenaar van een event een {\bf update voorstellen voor attributen}. + \item Gebruikers zijn {\bf niet gedwongen om één interface te gebruiken om gegevens aan MISP bij te voegen}. + \end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Voorbeeld: Vrije tekst import in MISP} + \includegraphics[scale=0.3]{screenshots/freetext1.PNG}\\ + \includegraphics[scale=0.3]{screenshots/freetxt2.PNG}\\ + \includegraphics[scale=0.3]{screenshots/freetxt3.PNG} +\end{frame} + +\begin{frame} + \frametitle{Ondersteuning voor classificaties} + \begin{itemize} + \item Het gebruik van tags is een simpele manier om een classificatie toe te voegen aan een event of attribuut. + \item Een {\bf classificatie moet globaal} in gebruik zijn om ook efficient te zijn. + \item Gebruikers kunnen via een flexibel tagging systeem kiezen uit de meer dan 42 bestaande taxonomieën of ze kunnen hun eigen taxonomie bijvoegen. + \end{itemize} + \includegraphics[scale=0.20]{tags-2-4-70.png} +\end{frame} + +\begin{frame} +\frametitle{Ondersteuning voor het delen in MISP} +\begin{itemize} + \item Delegeren van de publicatie van events naar andere organisaties (sinds MISP 2.4.18). + \begin{itemize} + \item Deze andere organisatie kan dan eigenaar worden van het event en op deze manier zorgen voor de {\bf pseudo-anonimiteit van de oorspronkelijke organisatie}. + \end{itemize} + \item Definiëren van groepen om specifieke informatie mee te delen (vanaf 2.4). + \begin{itemize} + \item De gemeenschappen om mee te delen kunnen lokaal of tussen verschillende MISP instanties gebruikt worden. + \item Het delen kan gebeuren op zowel {\bf event} als {\bf attribuut} niveau (b.v. financiële indicatoren met de financiële groepen en cyber security indicatoren met de CSIRT gemeenschap). + \end{itemize} +\end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Ondersteuning voor waarnemingen} + \begin{columns}[t] + \column{5.0cm} + \begin{figure} + \includegraphics[scale=0.3]{screenshots/sighting-n.png}\\ + \includegraphics[scale=0.34]{screenshots/Sightings2.PNG} + \end{figure} + \column{7cm} + \begin{itemize} + \item Gebruikers kunnen via {\bf waarnemingen} de gemeenschap op de hoogte stellen van activiteit gerelateerd aan een indicator. + \item Het is mogelijk om negatieve waarnemingen (false positives) en waarnemingen met een vervaldatum in te geven. + \item Waarnemingen kunnen gebeuren via de web interface, de API of door STIX waarnemings-documenten te importeren. + \item Er zijn verschillende toepassingen om indicatoren te rangschikken op basis van waarnemingen. + \end{itemize} + \end{columns} +\end{frame} + + +\begin{frame} +\frametitle{Verbeteringen voor het delen van informatie in MISP} +\begin{itemize} + \item Valse positiven (false-positive) blijven een terugkerende uitdaging bij het delen van informatie. + \item Vanaf MISP 2.4.39 hebben we het concept van misp-warninglists\footnote{\url{https://github.com/MISP/misp-warninglists}} geïntroduceerd om de analysten te ondersteunen bij hun dagtaak. + \item Dit zijn voorgedefinieerde lijsten van indicatoren die vaak een valse positieve zijn, zoals bijvoorbeeld RFC1918 netwerken of publieke DNS servers. +\end{itemize} +\end{frame} + +\begin{frame} +\frametitle{Ondersteuninng voor het delen binnen en buiten een organisatie} +\begin{itemize} + \item Zelfs binnen één en dezelfde omgeving kunnen er verschillende use cases zijn voor het gebruik van MISP (b.v. groepen die MISP gebruiken voor dynamische malware analyse en correlatie, andere groepen die het dan weer gebruiken voor het versturen van meldingen). + \item Vanaf MISP 2.4.51, is er de optie om {\bf lokale MISP} servers met elkaar te verbinden. Zo kan je verschillende niveaus van delen voorkomen en kan je van een gemengde synchronisatie gebruik maken, zowel binnen als buiten de organisatie. + \item Er is ondersteuning voor feeds voor synchronisatie tussen vertrouwde en niet vertrouwde netwerken. +\end{itemize} +\end{frame} + +\begin{frame} + \frametitle{Starten met MISP en indicatoren} + \begin{itemize} + \item We onderhouden de standaard CIRCL OSINT-feeds (TLP:WHITE geselecteerd uit onze gemeenschappen) zodat gebruikers snel aan de slag kunnen gaan met MISP. + \item Het formaat van de OSINT-feed is gebaseerd op standaard MISP JSON-uitvoer van een externe TLS / HTTP-server. + \item Aanvullende contentproviders kunnen hun eigen MISP-feeds leveren. (\url{https://botvrij.eu/}). + \item Dit laat gebruikers toe om hun MISP-installaties te {\bf testen en te synchroniseren met een echte gegevensset}. + \item Dit kan bijdragen aan andere bronnen van dreigings informatie en helpt ook bij de analyze naar overlappende data\footnote{Een steeds terugkerende uitdaging bij het delen van informatie}. + \end{itemize} +\end{frame} + + +\begin{frame} + \frametitle{Conclusie} + \begin{itemize} + \item {\bf De manier van informatie delen onstaat voornamelijk uit het gebruik} en het volgen van bestaande voorbeelden. + \item MISP is uiteindelijk slechts een hulpmiddel, het belangrijkste is nog altijd de manier hoe je de informatie deelt. De tool moet u daarbij zo transparant mogelijk ondersteunen tijdens uw werk. + \item Gebruikers moeten MISP kunnen aanpassen zodat zij een oplossing hebben voor de noden van hun gemeenschap. + \item Het MISP project combineert open source software, open standaarden, best practices en gemeenschappen om informatie deling te realiseren. + \end{itemize} +\end{frame} + diff --git a/x.16-misp-military-use-cases/creativity.png b/x.16-misp-military-use-cases/creativity.png new file mode 100644 index 0000000..d9878e2 Binary files /dev/null and b/x.16-misp-military-use-cases/creativity.png differ diff --git a/x.16-misp-military-use-cases/dashboard-trendings.png b/x.16-misp-military-use-cases/dashboard-trendings.png new file mode 100644 index 0000000..e8937e4 Binary files /dev/null and b/x.16-misp-military-use-cases/dashboard-trendings.png differ diff --git a/x.16-misp-military-use-cases/decaying-basescore.png b/x.16-misp-military-use-cases/decaying-basescore.png new file mode 100644 index 0000000..d21e261 Binary files /dev/null and b/x.16-misp-military-use-cases/decaying-basescore.png differ diff --git a/x.16-misp-military-use-cases/decaying-event.png b/x.16-misp-military-use-cases/decaying-event.png new file mode 100644 index 0000000..553b9e7 Binary files /dev/null and b/x.16-misp-military-use-cases/decaying-event.png differ diff --git a/x.16-misp-military-use-cases/decaying-index.png b/x.16-misp-military-use-cases/decaying-index.png new file mode 100644 index 0000000..c8c9754 Binary files /dev/null and b/x.16-misp-military-use-cases/decaying-index.png differ diff --git a/x.16-misp-military-use-cases/decaying-simulation.png b/x.16-misp-military-use-cases/decaying-simulation.png new file mode 100644 index 0000000..8252a09 Binary files /dev/null and b/x.16-misp-military-use-cases/decaying-simulation.png differ diff --git a/x.16-misp-military-use-cases/decaying-tool.png b/x.16-misp-military-use-cases/decaying-tool.png new file mode 100644 index 0000000..ff8c298 Binary files /dev/null and b/x.16-misp-military-use-cases/decaying-tool.png differ diff --git a/x.16-misp-military-use-cases/en_cef.png b/x.16-misp-military-use-cases/en_cef.png new file mode 100644 index 0000000..5fed070 Binary files /dev/null and b/x.16-misp-military-use-cases/en_cef.png differ diff --git a/x.16-misp-military-use-cases/galaxy-ransomware.png b/x.16-misp-military-use-cases/galaxy-ransomware.png new file mode 100644 index 0000000..5cf42cc Binary files /dev/null and b/x.16-misp-military-use-cases/galaxy-ransomware.png differ diff --git a/x.16-misp-military-use-cases/governance.png b/x.16-misp-military-use-cases/governance.png new file mode 100644 index 0000000..b9a9898 Binary files /dev/null and b/x.16-misp-military-use-cases/governance.png differ diff --git a/x.16-misp-military-use-cases/gru-1.png b/x.16-misp-military-use-cases/gru-1.png new file mode 100644 index 0000000..d812f88 Binary files /dev/null and b/x.16-misp-military-use-cases/gru-1.png differ diff --git a/x.16-misp-military-use-cases/misp-distributed.pdf b/x.16-misp-military-use-cases/misp-distributed.pdf new file mode 100644 index 0000000..9bacba7 Binary files /dev/null and b/x.16-misp-military-use-cases/misp-distributed.pdf differ diff --git a/x.16-misp-military-use-cases/misp-flows.png b/x.16-misp-military-use-cases/misp-flows.png new file mode 100644 index 0000000..2ad0316 Binary files /dev/null and b/x.16-misp-military-use-cases/misp-flows.png differ diff --git a/x.16-misp-military-use-cases/misp-overview-simplified.pdf b/x.16-misp-military-use-cases/misp-overview-simplified.pdf new file mode 100644 index 0000000..021b252 Binary files /dev/null and b/x.16-misp-military-use-cases/misp-overview-simplified.pdf differ diff --git a/x.16-misp-military-use-cases/misp-overview.pdf b/x.16-misp-military-use-cases/misp-overview.pdf new file mode 100644 index 0000000..b1d92c8 Binary files /dev/null and b/x.16-misp-military-use-cases/misp-overview.pdf differ diff --git a/x.16-misp-military-use-cases/misp.pdf b/x.16-misp-military-use-cases/misp.pdf new file mode 100644 index 0000000..f7a3f9d Binary files /dev/null and b/x.16-misp-military-use-cases/misp.pdf differ diff --git a/x.16-misp-military-use-cases/misplogo.pdf b/x.16-misp-military-use-cases/misplogo.pdf new file mode 100644 index 0000000..60da568 Binary files /dev/null and b/x.16-misp-military-use-cases/misplogo.pdf differ diff --git a/x.16-misp-military-use-cases/object.png b/x.16-misp-military-use-cases/object.png new file mode 100644 index 0000000..acebf04 Binary files /dev/null and b/x.16-misp-military-use-cases/object.png differ diff --git a/x.16-misp-military-use-cases/opinion-view.png b/x.16-misp-military-use-cases/opinion-view.png new file mode 100644 index 0000000..24bbd88 Binary files /dev/null and b/x.16-misp-military-use-cases/opinion-view.png differ diff --git a/x.16-misp-military-use-cases/screenshots/Sightings1.PNG b/x.16-misp-military-use-cases/screenshots/Sightings1.PNG new file mode 100644 index 0000000..5546cf3 Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/Sightings1.PNG differ diff --git a/x.16-misp-military-use-cases/screenshots/Sightings2.PNG b/x.16-misp-military-use-cases/screenshots/Sightings2.PNG new file mode 100644 index 0000000..cd35990 Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/Sightings2.PNG differ diff --git a/x.16-misp-military-use-cases/screenshots/attack-screenshot.png b/x.16-misp-military-use-cases/screenshots/attack-screenshot.png new file mode 100644 index 0000000..44cf2ff Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/attack-screenshot.png differ diff --git a/x.16-misp-military-use-cases/screenshots/bankaccount.png b/x.16-misp-military-use-cases/screenshots/bankaccount.png new file mode 100644 index 0000000..94eb5cc Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/bankaccount.png differ diff --git a/x.16-misp-military-use-cases/screenshots/bankview.png b/x.16-misp-military-use-cases/screenshots/bankview.png new file mode 100644 index 0000000..ce629c1 Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/bankview.png differ diff --git a/x.16-misp-military-use-cases/screenshots/campaign.png b/x.16-misp-military-use-cases/screenshots/campaign.png new file mode 100644 index 0000000..df5b653 Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/campaign.png differ diff --git a/x.16-misp-military-use-cases/screenshots/enrichment1.PNG b/x.16-misp-military-use-cases/screenshots/enrichment1.PNG new file mode 100644 index 0000000..4e7df5d Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/enrichment1.PNG differ diff --git a/x.16-misp-military-use-cases/screenshots/enrichment2.PNG b/x.16-misp-military-use-cases/screenshots/enrichment2.PNG new file mode 100644 index 0000000..5d1c4c4 Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/enrichment2.PNG differ diff --git a/x.16-misp-military-use-cases/screenshots/enrichment3.PNG b/x.16-misp-military-use-cases/screenshots/enrichment3.PNG new file mode 100644 index 0000000..e785f2c Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/enrichment3.PNG differ diff --git a/x.16-misp-military-use-cases/screenshots/enrichment4.PNG b/x.16-misp-military-use-cases/screenshots/enrichment4.PNG new file mode 100644 index 0000000..5f01cd9 Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/enrichment4.PNG differ diff --git a/x.16-misp-military-use-cases/screenshots/false-positive.png b/x.16-misp-military-use-cases/screenshots/false-positive.png new file mode 100644 index 0000000..7dd3dea Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/false-positive.png differ diff --git a/x.16-misp-military-use-cases/screenshots/freetext1.PNG b/x.16-misp-military-use-cases/screenshots/freetext1.PNG new file mode 100644 index 0000000..cb17c4c Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/freetext1.PNG differ diff --git a/x.16-misp-military-use-cases/screenshots/freetxt2.PNG b/x.16-misp-military-use-cases/screenshots/freetxt2.PNG new file mode 100644 index 0000000..4bfb092 Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/freetxt2.PNG differ diff --git a/x.16-misp-military-use-cases/screenshots/freetxt3.PNG b/x.16-misp-military-use-cases/screenshots/freetxt3.PNG new file mode 100644 index 0000000..6d348ee Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/freetxt3.PNG differ diff --git a/x.16-misp-military-use-cases/screenshots/normaltag.png b/x.16-misp-military-use-cases/screenshots/normaltag.png new file mode 100644 index 0000000..781182c Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/normaltag.png differ diff --git a/x.16-misp-military-use-cases/screenshots/sighting-n.png b/x.16-misp-military-use-cases/screenshots/sighting-n.png new file mode 100644 index 0000000..f9ec127 Binary files /dev/null and b/x.16-misp-military-use-cases/screenshots/sighting-n.png differ diff --git a/x.16-misp-military-use-cases/sighting-n.png b/x.16-misp-military-use-cases/sighting-n.png new file mode 100644 index 0000000..f9ec127 Binary files /dev/null and b/x.16-misp-military-use-cases/sighting-n.png differ diff --git a/x.16-misp-military-use-cases/slide.aux b/x.16-misp-military-use-cases/slide.aux new file mode 100644 index 0000000..494734d --- /dev/null +++ b/x.16-misp-military-use-cases/slide.aux @@ -0,0 +1,26 @@ +\relax +\providecommand\hyper@newdestlabel[2]{} +\providecommand\BKM@entry[2]{} +\providecommand\HyperFirstAtBeginDocument{\AtBeginDocument} +\HyperFirstAtBeginDocument{\ifx\hyper@anchor\@undefined +\global\let\oldcontentsline\contentsline +\gdef\contentsline#1#2#3#4{\oldcontentsline{#1}{#2}{#3}} +\global\let\oldnewlabel\newlabel +\gdef\newlabel#1#2{\newlabelxx{#1}#2} +\gdef\newlabelxx#1#2#3#4#5#6{\oldnewlabel{#1}{{#2}{#3}}} +\AtEndDocument{\ifx\hyper@anchor\@undefined +\let\contentsline\oldcontentsline +\let\newlabel\oldnewlabel +\fi} +\fi} +\global\let\hyper@last\relax +\gdef\HyperFirstAtBeginDocument#1{#1} +\providecommand\HyField@AuxAddToFields[1]{} +\providecommand\HyField@AuxAddToCoFields[2]{} +\@input{content.aux} +\pgfsyspdfmark {pgfid1}{1398509}{16636717} +\@writefile{nav}{\headcommand {\beamer@partpages {1}{19}}} +\@writefile{nav}{\headcommand {\beamer@subsectionpages {1}{19}}} +\@writefile{nav}{\headcommand {\beamer@sectionpages {1}{19}}} +\@writefile{nav}{\headcommand {\beamer@documentpages {19}}} +\@writefile{nav}{\headcommand {\gdef \inserttotalframenumber {18}}} diff --git a/x.16-misp-military-use-cases/slide.log b/x.16-misp-military-use-cases/slide.log new file mode 100644 index 0000000..7c1f17b --- /dev/null +++ b/x.16-misp-military-use-cases/slide.log @@ -0,0 +1,1395 @@ +This is pdfTeX, Version 3.14159265-2.6-1.40.20 (TeX Live 2019/Debian) (preloaded format=pdflatex 2024.3.16) 7 MAY 2024 17:18 +entering extended mode + restricted \write18 enabled. + %&-line parsing enabled. +**slide.tex +(./slide.tex +LaTeX2e <2020-02-02> patch level 2 +L3 programming layer <2020-02-14> +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamer.cls +Document Class: beamer 2019/09/29 v3.57 A class for typesetting presentations +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasemodes.sty +(/usr/share/texlive/texmf-dist/tex/latex/etoolbox/etoolbox.sty +Package: etoolbox 2019/09/21 v2.5h e-TeX tools for LaTeX (JAW) +\etb@tempcnta=\count167 +) +\beamer@tempbox=\box45 +\beamer@tempcount=\count168 +\c@beamerpauses=\count169 + +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasedecode.sty +\beamer@slideinframe=\count170 +\beamer@minimum=\count171 +\beamer@decode@box=\box46 +) +\beamer@commentbox=\box47 +\beamer@modecount=\count172 +) +(/usr/share/texlive/texmf-dist/tex/generic/iftex/ifpdf.sty +Package: ifpdf 2019/10/25 v3.4 ifpdf legacy package. Use iftex instead. + +(/usr/share/texlive/texmf-dist/tex/generic/iftex/iftex.sty +Package: iftex 2019/11/07 v1.0c TeX engine tests +)) +\headdp=\dimen134 +\footheight=\dimen135 +\sidebarheight=\dimen136 +\beamer@tempdim=\dimen137 +\beamer@finalheight=\dimen138 +\beamer@animht=\dimen139 +\beamer@animdp=\dimen140 +\beamer@animwd=\dimen141 +\beamer@leftmargin=\dimen142 +\beamer@rightmargin=\dimen143 +\beamer@leftsidebar=\dimen144 +\beamer@rightsidebar=\dimen145 +\beamer@boxsize=\dimen146 +\beamer@vboxoffset=\dimen147 +\beamer@descdefault=\dimen148 +\beamer@descriptionwidth=\dimen149 +\beamer@lastskip=\skip47 +\beamer@areabox=\box48 +\beamer@animcurrent=\box49 +\beamer@animshowbox=\box50 +\beamer@sectionbox=\box51 +\beamer@logobox=\box52 +\beamer@linebox=\box53 +\beamer@sectioncount=\count173 +\beamer@subsubsectionmax=\count174 +\beamer@subsectionmax=\count175 +\beamer@sectionmax=\count176 +\beamer@totalheads=\count177 +\beamer@headcounter=\count178 +\beamer@partstartpage=\count179 +\beamer@sectionstartpage=\count180 +\beamer@subsectionstartpage=\count181 +\beamer@animationtempa=\count182 +\beamer@animationtempb=\count183 +\beamer@xpos=\count184 +\beamer@ypos=\count185 +\beamer@ypos@offset=\count186 +\beamer@showpartnumber=\count187 +\beamer@currentsubsection=\count188 +\beamer@coveringdepth=\count189 +\beamer@sectionadjust=\count190 +\beamer@tocsectionnumber=\count191 + +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbaseoptions.sty +(/usr/share/texlive/texmf-dist/tex/latex/graphics/keyval.sty +Package: keyval 2014/10/28 v1.15 key=value parser (DPC) +\KV@toks@=\toks14 +)) +\beamer@paperwidth=\skip48 +\beamer@paperheight=\skip49 + +(/usr/share/texlive/texmf-dist/tex/latex/geometry/geometry.sty +Package: geometry 2020/01/02 v5.9 Page Geometry + +(/usr/share/texlive/texmf-dist/tex/generic/iftex/ifvtex.sty +Package: ifvtex 2019/10/25 v1.7 ifvtex legacy package. Use iftex instead. +) +\Gm@cnth=\count192 +\Gm@cntv=\count193 +\c@Gm@tempcnt=\count194 +\Gm@bindingoffset=\dimen150 +\Gm@wd@mp=\dimen151 +\Gm@odd@mp=\dimen152 +\Gm@even@mp=\dimen153 +\Gm@layoutwidth=\dimen154 +\Gm@layoutheight=\dimen155 +\Gm@layouthoffset=\dimen156 +\Gm@layoutvoffset=\dimen157 +\Gm@dimlist=\toks15 +) +(/usr/share/texlive/texmf-dist/tex/latex/base/size11.clo +File: size11.clo 2019/12/20 v1.4l Standard LaTeX file (size option) +) +(/usr/share/texlive/texmf-dist/tex/latex/pgf/basiclayer/pgfcore.sty +(/usr/share/texlive/texmf-dist/tex/latex/graphics/graphicx.sty +Package: graphicx 2019/11/30 v1.2a Enhanced LaTeX Graphics (DPC,SPQR) + +(/usr/share/texlive/texmf-dist/tex/latex/graphics/graphics.sty +Package: graphics 2019/11/30 v1.4a Standard LaTeX Graphics (DPC,SPQR) + +(/usr/share/texlive/texmf-dist/tex/latex/graphics/trig.sty +Package: trig 2016/01/03 v1.10 sin cos tan (DPC) +) +(/usr/share/texlive/texmf-dist/tex/latex/graphics-cfg/graphics.cfg +File: graphics.cfg 2016/06/04 v1.11 sample graphics configuration +) +Package graphics Info: Driver file: pdftex.def on input line 105. + +(/usr/share/texlive/texmf-dist/tex/latex/graphics-def/pdftex.def +File: pdftex.def 2018/01/08 v1.0l Graphics/color driver for pdftex +)) +\Gin@req@height=\dimen158 +\Gin@req@width=\dimen159 +) +(/usr/share/texlive/texmf-dist/tex/latex/pgf/systemlayer/pgfsys.sty +(/usr/share/texlive/texmf-dist/tex/latex/pgf/utilities/pgfrcs.sty +(/usr/share/texlive/texmf-dist/tex/generic/pgf/utilities/pgfutil-common.tex +\pgfutil@everybye=\toks16 +\pgfutil@tempdima=\dimen160 +\pgfutil@tempdimb=\dimen161 + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/utilities/pgfutil-common-lists.t +ex)) (/usr/share/texlive/texmf-dist/tex/generic/pgf/utilities/pgfutil-latex.def +\pgfutil@abb=\box54 +(/usr/share/texlive/texmf-dist/tex/latex/ms/everyshi.sty +Package: everyshi 2001/05/15 v3.00 EveryShipout Package (MS) +)) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/utilities/pgfrcs.code.tex +(/usr/share/texlive/texmf-dist/tex/generic/pgf/pgf.revision.tex) +Package: pgfrcs 2020/01/08 v3.1.5b (3.1.5b) +)) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/systemlayer/pgfsys.code.tex +Package: pgfsys 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/utilities/pgfkeys.code.tex +\pgfkeys@pathtoks=\toks17 +\pgfkeys@temptoks=\toks18 + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/utilities/pgfkeysfiltered.code.t +ex +\pgfkeys@tmptoks=\toks19 +)) +\pgf@x=\dimen162 +\pgf@y=\dimen163 +\pgf@xa=\dimen164 +\pgf@ya=\dimen165 +\pgf@xb=\dimen166 +\pgf@yb=\dimen167 +\pgf@xc=\dimen168 +\pgf@yc=\dimen169 +\pgf@xd=\dimen170 +\pgf@yd=\dimen171 +\w@pgf@writea=\write3 +\r@pgf@reada=\read2 +\c@pgf@counta=\count195 +\c@pgf@countb=\count196 +\c@pgf@countc=\count197 +\c@pgf@countd=\count198 +\t@pgf@toka=\toks20 +\t@pgf@tokb=\toks21 +\t@pgf@tokc=\toks22 +\pgf@sys@id@count=\count199 + (/usr/share/texlive/texmf-dist/tex/generic/pgf/systemlayer/pgf.cfg +File: pgf.cfg 2020/01/08 v3.1.5b (3.1.5b) +) +Driver file for pgf: pgfsys-pdftex.def + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/systemlayer/pgfsys-pdftex.def +File: pgfsys-pdftex.def 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/systemlayer/pgfsys-common-pdf.de +f +File: pgfsys-common-pdf.def 2020/01/08 v3.1.5b (3.1.5b) +))) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/systemlayer/pgfsyssoftpath.code. +tex +File: pgfsyssoftpath.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgfsyssoftpath@smallbuffer@items=\count266 +\pgfsyssoftpath@bigbuffer@items=\count267 +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/systemlayer/pgfsysprotocol.code. +tex +File: pgfsysprotocol.code.tex 2020/01/08 v3.1.5b (3.1.5b) +)) (/usr/share/texlive/texmf-dist/tex/latex/xcolor/xcolor.sty +Package: xcolor 2016/05/11 v2.12 LaTeX color extensions (UK) + +(/usr/share/texlive/texmf-dist/tex/latex/graphics-cfg/color.cfg +File: color.cfg 2016/01/02 v1.6 sample color configuration +) +Package xcolor Info: Driver file: pdftex.def on input line 225. +Package xcolor Info: Model `cmy' substituted by `cmy0' on input line 1348. +Package xcolor Info: Model `hsb' substituted by `rgb' on input line 1352. +Package xcolor Info: Model `RGB' extended on input line 1364. +Package xcolor Info: Model `HTML' substituted by `rgb' on input line 1366. +Package xcolor Info: Model `Hsb' substituted by `hsb' on input line 1367. +Package xcolor Info: Model `tHsb' substituted by `hsb' on input line 1368. +Package xcolor Info: Model `HSB' substituted by `hsb' on input line 1369. +Package xcolor Info: Model `Gray' substituted by `gray' on input line 1370. +Package xcolor Info: Model `wave' substituted by `hsb' on input line 1371. +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcore.code.tex +Package: pgfcore 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmath.code.tex +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathcalc.code.tex +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathutil.code.tex) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathparser.code.tex +\pgfmath@dimen=\dimen172 +\pgfmath@count=\count268 +\pgfmath@box=\box55 +\pgfmath@toks=\toks23 +\pgfmath@stack@operand=\toks24 +\pgfmath@stack@operation=\toks25 +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathfunctions.code.tex +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathfunctions.basic.code +.tex) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathfunctions.trigonomet +ric.code.tex) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathfunctions.random.cod +e.tex) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathfunctions.comparison +.code.tex) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathfunctions.base.code. +tex) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathfunctions.round.code +.tex) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathfunctions.misc.code. +tex) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathfunctions.integerari +thmetics.code.tex))) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmathfloat.code.tex +\c@pgfmathroundto@lastzeros=\count269 +)) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfint.code.tex) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcorepoints.code.te +x +File: pgfcorepoints.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgf@picminx=\dimen173 +\pgf@picmaxx=\dimen174 +\pgf@picminy=\dimen175 +\pgf@picmaxy=\dimen176 +\pgf@pathminx=\dimen177 +\pgf@pathmaxx=\dimen178 +\pgf@pathminy=\dimen179 +\pgf@pathmaxy=\dimen180 +\pgf@xx=\dimen181 +\pgf@xy=\dimen182 +\pgf@yx=\dimen183 +\pgf@yy=\dimen184 +\pgf@zx=\dimen185 +\pgf@zy=\dimen186 +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcorepathconstruct. +code.tex +File: pgfcorepathconstruct.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgf@path@lastx=\dimen187 +\pgf@path@lasty=\dimen188 +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcorepathusage.code +.tex +File: pgfcorepathusage.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgf@shorten@end@additional=\dimen189 +\pgf@shorten@start@additional=\dimen190 +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcorescopes.code.te +x +File: pgfcorescopes.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgfpic=\box56 +\pgf@hbox=\box57 +\pgf@layerbox@main=\box58 +\pgf@picture@serial@count=\count270 +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcoregraphicstate.c +ode.tex +File: pgfcoregraphicstate.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgflinewidth=\dimen191 +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcoretransformation +s.code.tex +File: pgfcoretransformations.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgf@pt@x=\dimen192 +\pgf@pt@y=\dimen193 +\pgf@pt@temp=\dimen194 +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcorequick.code.tex +File: pgfcorequick.code.tex 2020/01/08 v3.1.5b (3.1.5b) +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcoreobjects.code.t +ex +File: pgfcoreobjects.code.tex 2020/01/08 v3.1.5b (3.1.5b) +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcorepathprocessing +.code.tex +File: pgfcorepathprocessing.code.tex 2020/01/08 v3.1.5b (3.1.5b) +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcorearrows.code.te +x +File: pgfcorearrows.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgfarrowsep=\dimen195 +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcoreshade.code.tex +File: pgfcoreshade.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgf@max=\dimen196 +\pgf@sys@shading@range@num=\count271 +\pgf@shadingcount=\count272 +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcoreimage.code.tex +File: pgfcoreimage.code.tex 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcoreexternal.code. +tex +File: pgfcoreexternal.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgfexternal@startupbox=\box59 +)) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcorelayers.code.te +x +File: pgfcorelayers.code.tex 2020/01/08 v3.1.5b (3.1.5b) +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcoretransparency.c +ode.tex +File: pgfcoretransparency.code.tex 2020/01/08 v3.1.5b (3.1.5b) +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcorepatterns.code. +tex +File: pgfcorepatterns.code.tex 2020/01/08 v3.1.5b (3.1.5b) +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/basiclayer/pgfcorerdf.code.tex +File: pgfcorerdf.code.tex 2020/01/08 v3.1.5b (3.1.5b) +))) (/usr/share/texlive/texmf-dist/tex/latex/pgf/utilities/xxcolor.sty +Package: xxcolor 2003/10/24 ver 0.1 +\XC@nummixins=\count273 +\XC@countmixins=\count274 +) +(/usr/share/texlive/texmf-dist/tex/generic/atbegshi/atbegshi.sty +Package: atbegshi 2019/12/05 v1.19 At begin shipout hook (HO) + +(/usr/share/texlive/texmf-dist/tex/generic/infwarerr/infwarerr.sty +Package: infwarerr 2019/12/03 v1.5 Providing info/warning/error messages (HO) +) +(/usr/share/texlive/texmf-dist/tex/generic/ltxcmds/ltxcmds.sty +Package: ltxcmds 2019/12/15 v1.24 LaTeX kernel commands for general use (HO) +)) +(/usr/share/texlive/texmf-dist/tex/latex/hyperref/hyperref.sty +Package: hyperref 2020/01/14 v7.00d Hypertext links for LaTeX + +(/usr/share/texlive/texmf-dist/tex/latex/pdftexcmds/pdftexcmds.sty +Package: pdftexcmds 2019/11/24 v0.31 Utility functions of pdfTeX for LuaTeX (HO +) +Package pdftexcmds Info: \pdf@primitive is available. +Package pdftexcmds Info: \pdf@ifprimitive is available. +Package pdftexcmds Info: \pdfdraftmode found. +) +(/usr/share/texlive/texmf-dist/tex/generic/kvsetkeys/kvsetkeys.sty +Package: kvsetkeys 2019/12/15 v1.18 Key value parser (HO) +) +(/usr/share/texlive/texmf-dist/tex/generic/kvdefinekeys/kvdefinekeys.sty +Package: kvdefinekeys 2019-12-19 v1.6 Define keys (HO) +) +(/usr/share/texlive/texmf-dist/tex/generic/pdfescape/pdfescape.sty +Package: pdfescape 2019/12/09 v1.15 Implements pdfTeX's escape features (HO) +) +(/usr/share/texlive/texmf-dist/tex/latex/hycolor/hycolor.sty +Package: hycolor 2020-01-27 v1.10 Color options for hyperref/bookmark (HO) +) +(/usr/share/texlive/texmf-dist/tex/latex/letltxmacro/letltxmacro.sty +Package: letltxmacro 2019/12/03 v1.6 Let assignment for LaTeX macros (HO) +) +(/usr/share/texlive/texmf-dist/tex/latex/auxhook/auxhook.sty +Package: auxhook 2019-12-17 v1.6 Hooks for auxiliary files (HO) +) +(/usr/share/texlive/texmf-dist/tex/latex/kvoptions/kvoptions.sty +Package: kvoptions 2019/11/29 v3.13 Key value format for package options (HO) +) +\@linkdim=\dimen197 +\Hy@linkcounter=\count275 +\Hy@pagecounter=\count276 + +(/usr/share/texlive/texmf-dist/tex/latex/hyperref/pd1enc.def +File: pd1enc.def 2020/01/14 v7.00d Hyperref: PDFDocEncoding definition (HO) +Now handling font encoding PD1 ... +... no UTF-8 mapping file for font encoding PD1 +) +(/usr/share/texlive/texmf-dist/tex/generic/intcalc/intcalc.sty +Package: intcalc 2019/12/15 v1.3 Expandable calculations with integers (HO) +) +(/usr/share/texlive/texmf-dist/tex/generic/etexcmds/etexcmds.sty +Package: etexcmds 2019/12/15 v1.7 Avoid name clashes with e-TeX commands (HO) +) +\Hy@SavedSpaceFactor=\count277 +\pdfmajorversion=\count278 +Package hyperref Info: Option `bookmarks' set `true' on input line 4421. +Package hyperref Info: Option `bookmarksopen' set `true' on input line 4421. +Package hyperref Info: Option `implicit' set `false' on input line 4421. +Package hyperref Info: Hyper figures OFF on input line 4547. +Package hyperref Info: Link nesting OFF on input line 4552. +Package hyperref Info: Hyper index ON on input line 4555. +Package hyperref Info: Plain pages OFF on input line 4562. +Package hyperref Info: Backreferencing OFF on input line 4567. +Package hyperref Info: Implicit mode OFF; no redefinition of LaTeX internals. +Package hyperref Info: Bookmarks ON on input line 4800. +\c@Hy@tempcnt=\count279 + +(/usr/share/texlive/texmf-dist/tex/latex/url/url.sty +\Urlmuskip=\muskip16 +Package: url 2013/09/16 ver 3.4 Verb mode for urls, etc. +) +LaTeX Info: Redefining \url on input line 5159. +\XeTeXLinkMargin=\dimen198 + +(/usr/share/texlive/texmf-dist/tex/generic/bitset/bitset.sty +Package: bitset 2019/12/09 v1.3 Handle bit-vector datatype (HO) + +(/usr/share/texlive/texmf-dist/tex/generic/bigintcalc/bigintcalc.sty +Package: bigintcalc 2019/12/15 v1.5 Expandable calculations on big integers (HO +) +)) +\Fld@menulength=\count280 +\Field@Width=\dimen199 +\Fld@charsize=\dimen256 +Package hyperref Info: Hyper figures OFF on input line 6430. +Package hyperref Info: Link nesting OFF on input line 6435. +Package hyperref Info: Hyper index ON on input line 6438. +Package hyperref Info: backreferencing OFF on input line 6445. +Package hyperref Info: Link coloring OFF on input line 6450. +Package hyperref Info: Link coloring with OCG OFF on input line 6455. +Package hyperref Info: PDF/A mode OFF on input line 6460. +LaTeX Info: Redefining \ref on input line 6500. +LaTeX Info: Redefining \pageref on input line 6504. +\Hy@abspage=\count281 + + +Package hyperref Message: Stopped early. + +) +Package hyperref Info: Driver (autodetected): hpdftex. + (/usr/share/texlive/texmf-dist/tex/latex/hyperref/hpdftex.def +File: hpdftex.def 2020/01/14 v7.00d Hyperref driver for pdfTeX + +(/usr/share/texlive/texmf-dist/tex/latex/atveryend/atveryend.sty +Package: atveryend 2019-12-11 v1.11 Hooks at the very end of document (HO) +) +\Fld@listcount=\count282 +\c@bookmark@seq@number=\count283 + +(/usr/share/texlive/texmf-dist/tex/latex/rerunfilecheck/rerunfilecheck.sty +Package: rerunfilecheck 2019/12/05 v1.9 Rerun checks for auxiliary files (HO) + +(/usr/share/texlive/texmf-dist/tex/generic/uniquecounter/uniquecounter.sty +Package: uniquecounter 2019/12/15 v1.4 Provide unlimited unique counter (HO) +) +Package uniquecounter Info: New unique counter `rerunfilecheck' on input line 2 +86. +)) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbaserequires.sty +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasecompatibility.sty) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasefont.sty +(/usr/share/texlive/texmf-dist/tex/latex/amsfonts/amssymb.sty +Package: amssymb 2013/01/14 v3.01 AMS font symbols + +(/usr/share/texlive/texmf-dist/tex/latex/amsfonts/amsfonts.sty +Package: amsfonts 2013/01/14 v3.01 Basic AMSFonts support +\@emptytoks=\toks26 +\symAMSa=\mathgroup4 +\symAMSb=\mathgroup5 +LaTeX Font Info: Redeclaring math symbol \hbar on input line 98. +LaTeX Font Info: Overwriting math alphabet `\mathfrak' in version `bold' +(Font) U/euf/m/n --> U/euf/b/n on input line 106. +)) +(/usr/share/texlive/texmf-dist/tex/latex/sansmathaccent/sansmathaccent.sty +Package: sansmathaccent 2020/01/31 + +(/usr/share/texlive/texmf-dist/tex/latex/koma-script/scrlfile.sty +Package: scrlfile 2020/01/24 v3.29 KOMA-Script package (loading files) +))) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasetranslator.sty +(/usr/share/texlive/texmf-dist/tex/latex/translator/translator.sty +Package: translator 2019-05-31 v1.12a Easy translation of strings in LaTeX +)) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasemisc.sty) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasetwoscreens.sty) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbaseoverlay.sty +\beamer@argscount=\count284 +\beamer@lastskipcover=\skip50 +\beamer@trivlistdepth=\count285 +) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasetitle.sty) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasesection.sty +\c@lecture=\count286 +\c@part=\count287 +\c@section=\count288 +\c@subsection=\count289 +\c@subsubsection=\count290 +) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbaseframe.sty +\beamer@framebox=\box60 +\beamer@frametitlebox=\box61 +\beamer@zoombox=\box62 +\beamer@zoomcount=\count291 +\beamer@zoomframecount=\count292 +\beamer@frametextheight=\dimen257 +\c@subsectionslide=\count293 +\beamer@frametopskip=\skip51 +\beamer@framebottomskip=\skip52 +\beamer@frametopskipautobreak=\skip53 +\beamer@framebottomskipautobreak=\skip54 +\beamer@envbody=\toks27 +\framewidth=\dimen258 +\c@framenumber=\count294 +) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbaseverbatim.sty +\beamer@verbatimfileout=\write4 +) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbaseframesize.sty +\beamer@splitbox=\box63 +\beamer@autobreakcount=\count295 +\beamer@autobreaklastheight=\dimen259 +\beamer@frametitletoks=\toks28 +\beamer@framesubtitletoks=\toks29 +) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbaseframecomponents.sty +\beamer@footins=\box64 +) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasecolor.sty) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasenotes.sty +\beamer@frameboxcopy=\box65 +) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasetoc.sty) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasetemplates.sty +\beamer@sbttoks=\toks30 + +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbaseauxtemplates.sty +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbaseboxes.sty +\bmb@box=\box66 +\bmb@colorbox=\box67 +\bmb@boxshadow=\box68 +\bmb@boxshadowball=\box69 +\bmb@boxshadowballlarge=\box70 +\bmb@temp=\dimen260 +\bmb@dima=\dimen261 +\bmb@dimb=\dimen262 +\bmb@prevheight=\dimen263 +) +\beamer@blockheadheight=\dimen264 +)) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbaselocalstructure.sty +(/usr/share/texlive/texmf-dist/tex/latex/tools/enumerate.sty +Package: enumerate 2015/07/23 v3.00 enumerate extensions (DPC) +\@enLab=\toks31 +) +\c@figure=\count296 +\c@table=\count297 +\abovecaptionskip=\skip55 +\belowcaptionskip=\skip56 +) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasenavigation.sty +\beamer@section@min@dim=\dimen265 +) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasetheorems.sty +(/usr/share/texlive/texmf-dist/tex/latex/amsmath/amsmath.sty +Package: amsmath 2020/01/20 v2.17e AMS math features +\@mathmargin=\skip57 + +For additional information on amsmath, use the `?' option. +(/usr/share/texlive/texmf-dist/tex/latex/amsmath/amstext.sty +Package: amstext 2000/06/29 v2.01 AMS text + +(/usr/share/texlive/texmf-dist/tex/latex/amsmath/amsgen.sty +File: amsgen.sty 1999/11/30 v2.0 generic functions +\@emptytoks=\toks32 +\ex@=\dimen266 +)) +(/usr/share/texlive/texmf-dist/tex/latex/amsmath/amsbsy.sty +Package: amsbsy 1999/11/29 v1.2d Bold Symbols +\pmbraise@=\dimen267 +) +(/usr/share/texlive/texmf-dist/tex/latex/amsmath/amsopn.sty +Package: amsopn 2016/03/08 v2.02 operator names +) +\inf@bad=\count298 +LaTeX Info: Redefining \frac on input line 227. +\uproot@=\count299 +\leftroot@=\count300 +LaTeX Info: Redefining \overline on input line 389. +\classnum@=\count301 +\DOTSCASE@=\count302 +LaTeX Info: Redefining \ldots on input line 486. +LaTeX Info: Redefining \dots on input line 489. +LaTeX Info: Redefining \cdots on input line 610. +\Mathstrutbox@=\box71 +\strutbox@=\box72 +\big@size=\dimen268 +LaTeX Font Info: Redeclaring font encoding OML on input line 733. +LaTeX Font Info: Redeclaring font encoding OMS on input line 734. +\macc@depth=\count303 +\c@MaxMatrixCols=\count304 +\dotsspace@=\muskip17 +\c@parentequation=\count305 +\dspbrk@lvl=\count306 +\tag@help=\toks33 +\row@=\count307 +\column@=\count308 +\maxfields@=\count309 +\andhelp@=\toks34 +\eqnshift@=\dimen269 +\alignsep@=\dimen270 +\tagshift@=\dimen271 +\tagwidth@=\dimen272 +\totwidth@=\dimen273 +\lineht@=\dimen274 +\@envbody=\toks35 +\multlinegap=\skip58 +\multlinetaggap=\skip59 +\mathdisplay@stack=\toks36 +LaTeX Info: Redefining \[ on input line 2859. +LaTeX Info: Redefining \] on input line 2860. +) +(/usr/share/texlive/texmf-dist/tex/latex/amscls/amsthm.sty +Package: amsthm 2017/10/31 v2.20.4 +\thm@style=\toks37 +\thm@bodyfont=\toks38 +\thm@headfont=\toks39 +\thm@notefont=\toks40 +\thm@headpunct=\toks41 +\thm@preskip=\skip60 +\thm@postskip=\skip61 +\thm@headsep=\skip62 +\dth@everypar=\toks42 +) +\c@theorem=\count310 +) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerbasethemes.sty)) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerthemedefault.sty +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerfontthemedefault.sty) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamercolorthemedefault.sty) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerinnerthemedefault.sty +\beamer@dima=\dimen275 +\beamer@dimb=\dimen276 +) +(/usr/share/texlive/texmf-dist/tex/latex/beamer/beamerouterthemedefault.sty))) +(/usr/share/texlive/texmf-dist/tex/latex/beamertheme-focus/beamerthemefocus.sty +Package: beamerthemefocus 2019/11/20 v2.5 Focus Beamer theme +(/usr/share/texlive/texmf-dist/tex/latex/base/fontenc.sty +Package: fontenc 2020/02/11 v2.0o Standard LaTeX package +) +(/usr/share/texlive/texmf-dist/tex/latex/fira/FiraSans.sty +Package: FiraSans 2019/10/10 (Bob Tennent and autoinst) Style file for Fira San +s fonts. + +(/usr/share/texlive/texmf-dist/tex/generic/iftex/ifxetex.sty +Package: ifxetex 2019/10/25 v0.7 ifxetex legacy package. Use iftex instead. +) +(/usr/share/texlive/texmf-dist/tex/generic/iftex/ifluatex.sty +Package: ifluatex 2019/10/25 v1.5 ifluatex legacy package. Use iftex instead. +) +(/usr/share/texlive/texmf-dist/tex/latex/xkeyval/xkeyval.sty +Package: xkeyval 2014/12/03 v2.7a package option processing (HA) + +(/usr/share/texlive/texmf-dist/tex/generic/xkeyval/xkeyval.tex +(/usr/share/texlive/texmf-dist/tex/generic/xkeyval/xkvutils.tex +\XKV@toks=\toks43 +\XKV@tempa@toks=\toks44 +) +\XKV@depth=\count311 +File: xkeyval.tex 2014/12/03 v2.7a key=value parser (HA) +)) +(/usr/share/texlive/texmf-dist/tex/latex/base/textcomp.sty +Package: textcomp 2020/02/02 v2.0n Standard LaTeX package +) +(/usr/share/texlive/texmf-dist/tex/latex/fontaxes/fontaxes.sty +Package: fontaxes 2014/03/23 v1.0d Font selection axes +LaTeX Info: Redefining \upshape on input line 29. +LaTeX Info: Redefining \itshape on input line 31. +LaTeX Info: Redefining \slshape on input line 33. +LaTeX Info: Redefining \swshape on input line 35. +LaTeX Info: Redefining \scshape on input line 37. +LaTeX Info: Redefining \sscshape on input line 39. +LaTeX Info: Redefining \ulcshape on input line 41. +LaTeX Info: Redefining \textsw on input line 47. +LaTeX Info: Redefining \textssc on input line 48. +LaTeX Info: Redefining \textulc on input line 49. +)) +(/usr/share/texlive/texmf-dist/tex/latex/fira/FiraMono.sty +Package: FiraMono 2019/10/10 (Bob Tennent and autoinst) Style file for Fira Mon +o fonts. + +(/usr/share/texlive/texmf-dist/tex/latex/base/fontenc.sty +Package: fontenc 2020/02/11 v2.0o Standard LaTeX package +LaTeX Font Info: Trying to load font information for T1+FiraSans-OsF on inpu +t line 112. + +(/usr/share/texlive/texmf-dist/tex/latex/fira/T1FiraSans-OsF.fd +File: T1FiraSans-OsF.fd 2019/10/10 (autoinst) Font definitions for T1/FiraSans- +OsF. +) +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' in size <10.95> not availa +ble +(Font) Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp +ut line 112. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/n' will be +(Font) scaled to size 10.95pt on input line 112. +)) +(/usr/share/texlive/texmf-dist/tex/latex/beamertheme-focus/beamercolorthemefocu +s.sty) +(/usr/share/texlive/texmf-dist/tex/latex/beamertheme-focus/beamerfontthemefocus +.sty) +(/usr/share/texlive/texmf-dist/tex/latex/beamertheme-focus/beamerinnerthemefocu +s.sty (/usr/share/texlive/texmf-dist/tex/latex/pgf/frontendlayer/tikz.sty +(/usr/share/texlive/texmf-dist/tex/latex/pgf/basiclayer/pgf.sty +Package: pgf 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/modules/pgfmoduleshapes.code.tex +File: pgfmoduleshapes.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgfnodeparttextbox=\box73 +) (/usr/share/texlive/texmf-dist/tex/generic/pgf/modules/pgfmoduleplot.code.tex +File: pgfmoduleplot.code.tex 2020/01/08 v3.1.5b (3.1.5b) +) +(/usr/share/texlive/texmf-dist/tex/latex/pgf/compatibility/pgfcomp-version-0-65 +.sty +Package: pgfcomp-version-0-65 2020/01/08 v3.1.5b (3.1.5b) +\pgf@nodesepstart=\dimen277 +\pgf@nodesepend=\dimen278 +) +(/usr/share/texlive/texmf-dist/tex/latex/pgf/compatibility/pgfcomp-version-1-18 +.sty +Package: pgfcomp-version-1-18 2020/01/08 v3.1.5b (3.1.5b) +)) (/usr/share/texlive/texmf-dist/tex/latex/pgf/utilities/pgffor.sty +(/usr/share/texlive/texmf-dist/tex/latex/pgf/utilities/pgfkeys.sty +(/usr/share/texlive/texmf-dist/tex/generic/pgf/utilities/pgfkeys.code.tex)) +(/usr/share/texlive/texmf-dist/tex/latex/pgf/math/pgfmath.sty +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmath.code.tex)) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/utilities/pgffor.code.tex +Package: pgffor 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/math/pgfmath.code.tex) +\pgffor@iter=\dimen279 +\pgffor@skip=\dimen280 +\pgffor@stack=\toks45 +\pgffor@toks=\toks46 +)) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/frontendlayer/tikz/tikz.code.tex +Package: tikz 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/libraries/pgflibraryplothandlers +.code.tex +File: pgflibraryplothandlers.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgf@plot@mark@count=\count312 +\pgfplotmarksize=\dimen281 +) +\tikz@lastx=\dimen282 +\tikz@lasty=\dimen283 +\tikz@lastxsaved=\dimen284 +\tikz@lastysaved=\dimen285 +\tikz@lastmovetox=\dimen286 +\tikz@lastmovetoy=\dimen287 +\tikzleveldistance=\dimen288 +\tikzsiblingdistance=\dimen289 +\tikz@figbox=\box74 +\tikz@figbox@bg=\box75 +\tikz@tempbox=\box76 +\tikz@tempbox@bg=\box77 +\tikztreelevel=\count313 +\tikznumberofchildren=\count314 +\tikznumberofcurrentchild=\count315 +\tikz@fig@count=\count316 + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/modules/pgfmodulematrix.code.tex +File: pgfmodulematrix.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgfmatrixcurrentrow=\count317 +\pgfmatrixcurrentcolumn=\count318 +\pgf@matrix@numberofcolumns=\count319 +) +\tikz@expandcount=\count320 + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/frontendlayer/tikz/libraries/tik +zlibrarytopaths.code.tex +File: tikzlibrarytopaths.code.tex 2020/01/08 v3.1.5b (3.1.5b) +)))) +(/usr/share/texlive/texmf-dist/tex/latex/beamertheme-focus/beamerouterthemefocu +s.sty +(/usr/share/texlive/texmf-dist/tex/latex/appendixnumberbeamer/appendixnumberbea +mer.sty) (/usr/share/texlive/texmf-dist/tex/latex/bookmark/bookmark.sty +Package: bookmark 2019/12/03 v1.28 PDF bookmarks (HO) + +(/usr/share/texlive/texmf-dist/tex/latex/bookmark/bkm-pdftex.def +File: bkm-pdftex.def 2019/12/03 v1.28 bookmark driver for pdfTeX (HO) +\BKM@id=\count321 +)) +\focus@pbar@height=\skip63 +\focus@pbar@leftoffset=\skip64 +\focus@pbar@rightoffset=\skip65 +)) +(/usr/share/texlive/texmf-dist/tex/latex/base/inputenc.sty +Package: inputenc 2018/08/11 v1.3c Input encoding file +\inpenc@prehook=\toks47 +\inpenc@posthook=\toks48 +) +(/usr/share/texlive/texmf-dist/tex/latex/listings/listings.sty +\lst@mode=\count322 +\lst@gtempboxa=\box78 +\lst@token=\toks49 +\lst@length=\count323 +\lst@currlwidth=\dimen290 +\lst@column=\count324 +\lst@pos=\count325 +\lst@lostspace=\dimen291 +\lst@width=\dimen292 +\lst@newlines=\count326 +\lst@lineno=\count327 +\lst@maxwidth=\dimen293 + +(/usr/share/texlive/texmf-dist/tex/latex/listings/lstmisc.sty +File: lstmisc.sty 2019/09/10 1.8c (Carsten Heinz) +\c@lstnumber=\count328 +\lst@skipnumbers=\count329 +\lst@framebox=\box79 +) +(/usr/share/texlive/texmf-dist/tex/latex/listings/listings.cfg +File: listings.cfg 2019/09/10 1.8c listings configuration +)) +Package: listings 2019/09/10 1.8c (Carsten Heinz) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/frontendlayer/tikz/libraries/tik +zlibrarypositioning.code.tex +File: tikzlibrarypositioning.code.tex 2020/01/08 v3.1.5b (3.1.5b) +) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/frontendlayer/tikz/libraries/tik +zlibraryshapes.code.tex +File: tikzlibraryshapes.code.tex 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/frontendlayer/tikz/libraries/tik +zlibraryshapes.geometric.code.tex +File: tikzlibraryshapes.geometric.code.tex 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/libraries/shapes/pgflibraryshape +s.geometric.code.tex +File: pgflibraryshapes.geometric.code.tex 2020/01/08 v3.1.5b (3.1.5b) +)) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/frontendlayer/tikz/libraries/tik +zlibraryshapes.misc.code.tex +File: tikzlibraryshapes.misc.code.tex 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/libraries/shapes/pgflibraryshape +s.misc.code.tex +File: pgflibraryshapes.misc.code.tex 2020/01/08 v3.1.5b (3.1.5b) +)) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/frontendlayer/tikz/libraries/tik +zlibraryshapes.symbols.code.tex +File: tikzlibraryshapes.symbols.code.tex 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/libraries/shapes/pgflibraryshape +s.symbols.code.tex +File: pgflibraryshapes.symbols.code.tex 2020/01/08 v3.1.5b (3.1.5b) +)) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/frontendlayer/tikz/libraries/tik +zlibraryshapes.arrows.code.tex +File: tikzlibraryshapes.arrows.code.tex 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/libraries/shapes/pgflibraryshape +s.arrows.code.tex +File: pgflibraryshapes.arrows.code.tex 2020/01/08 v3.1.5b (3.1.5b) +)) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/frontendlayer/tikz/libraries/tik +zlibraryshapes.callouts.code.tex +(/usr/share/texlive/texmf-dist/tex/generic/pgf/libraries/shapes/pgflibraryshape +s.callouts.code.tex)) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/frontendlayer/tikz/libraries/tik +zlibraryshapes.multipart.code.tex +File: tikzlibraryshapes.multipart.code.tex 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/libraries/shapes/pgflibraryshape +s.multipart.code.tex +File: pgflibraryshapes.multipart.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\pgfnodepartlowerbox=\box80 +\pgfnodeparttwobox=\box81 +\pgfnodepartthreebox=\box82 +\pgfnodepartfourbox=\box83 +\pgfnodeparttwentybox=\box84 +\pgfnodepartnineteenbox=\box85 +\pgfnodeparteighteenbox=\box86 +\pgfnodepartseventeenbox=\box87 +\pgfnodepartsixteenbox=\box88 +\pgfnodepartfifteenbox=\box89 +\pgfnodepartfourteenbox=\box90 +\pgfnodepartthirteenbox=\box91 +\pgfnodeparttwelvebox=\box92 +\pgfnodepartelevenbox=\box93 +\pgfnodeparttenbox=\box94 +\pgfnodepartninebox=\box95 +\pgfnodeparteightbox=\box96 +\pgfnodepartsevenbox=\box97 +\pgfnodepartsixbox=\box98 +\pgfnodepartfivebox=\box99 +))) +(/usr/share/texlive/texmf-dist/tex/generic/pgf/frontendlayer/tikz/libraries/tik +zlibraryarrows.code.tex +File: tikzlibraryarrows.code.tex 2020/01/08 v3.1.5b (3.1.5b) + +(/usr/share/texlive/texmf-dist/tex/generic/pgf/libraries/pgflibraryarrows.code. +tex +File: pgflibraryarrows.code.tex 2020/01/08 v3.1.5b (3.1.5b) +\arrowsize=\dimen294 +)) (/usr/share/texlive/texmf-dist/tex/latex/l3backend/l3backend-pdfmode.def +File: l3backend-pdfmode.def 2020-02-03 L3 backend support: PDF mode +\l__kernel_color_stack_int=\count330 +\l__pdf_internal_box=\box100 +) (./slide.aux (./content.aux)) +\openout1 = `slide.aux'. + +LaTeX Font Info: Checking defaults for OML/cmm/m/it on input line 23. +LaTeX Font Info: ... okay on input line 23. +LaTeX Font Info: Checking defaults for OMS/cmsy/m/n on input line 23. +LaTeX Font Info: ... okay on input line 23. +LaTeX Font Info: Checking defaults for OT1/cmr/m/n on input line 23. +LaTeX Font Info: ... okay on input line 23. +LaTeX Font Info: Checking defaults for T1/cmr/m/n on input line 23. +LaTeX Font Info: ... okay on input line 23. +LaTeX Font Info: Checking defaults for TS1/cmr/m/n on input line 23. +LaTeX Font Info: ... okay on input line 23. +LaTeX Font Info: Checking defaults for OMX/cmex/m/n on input line 23. +LaTeX Font Info: ... okay on input line 23. +LaTeX Font Info: Checking defaults for U/cmr/m/n on input line 23. +LaTeX Font Info: ... okay on input line 23. +LaTeX Font Info: Checking defaults for PD1/pdf/m/n on input line 23. +LaTeX Font Info: ... okay on input line 23. + +*geometry* driver: auto-detecting +*geometry* detected driver: pdftex +*geometry* verbose mode - [ preamble ] result: +* driver: pdftex +* paper: custom +* layout: +* layoutoffset:(h,v)=(0.0pt,0.0pt) +* modes: includehead includefoot +* h-part:(L,W,R)=(21.33955pt, 321.51625pt, 21.33955pt) +* v-part:(T,H,B)=(0.0pt, 273.14662pt, 0.0pt) +* \paperwidth=364.19536pt +* \paperheight=273.14662pt +* \textwidth=321.51625pt +* \textheight=244.6939pt +* \oddsidemargin=-50.93044pt +* \evensidemargin=-50.93044pt +* \topmargin=-72.26999pt +* \headheight=14.22636pt +* \headsep=0.0pt +* \topskip=11.0pt +* \footskip=14.22636pt +* \marginparwidth=4.0pt +* \marginparsep=10.0pt +* \columnsep=10.0pt +* \skip\footins=10.0pt plus 4.0pt minus 2.0pt +* \hoffset=0.0pt +* \voffset=0.0pt +* \mag=1000 +* \@twocolumnfalse +* \@twosidefalse +* \@mparswitchfalse +* \@reversemarginfalse +* (1in=72.27pt=25.4mm, 1cm=28.453pt) + +(/usr/share/texlive/texmf-dist/tex/context/base/mkii/supp-pdf.mkii +[Loading MPS to PDF converter (version 2006.09.02).] +\scratchcounter=\count331 +\scratchdimen=\dimen295 +\scratchbox=\box101 +\nofMPsegments=\count332 +\nofMParguments=\count333 +\everyMPshowfont=\toks50 +\MPscratchCnt=\count334 +\MPscratchDim=\dimen296 +\MPnumerator=\count335 +\makeMPintoPDFobject=\count336 +\everyMPtoPDFconversion=\toks51 +) (/usr/share/texlive/texmf-dist/tex/latex/epstopdf-pkg/epstopdf-base.sty +Package: epstopdf-base 2020-01-24 v2.11 Base part for package epstopdf +Package epstopdf-base Info: Redefining graphics rule for `.eps' on input line 4 +85. + +(/usr/share/texlive/texmf-dist/tex/latex/latexconfig/epstopdf-sys.cfg +File: epstopdf-sys.cfg 2010/07/13 v1.3 Configuration of (r)epstopdf for TeX Liv +e +)) +ABD: EveryShipout initializing macros +\AtBeginShipoutBox=\box102 +Package hyperref Info: Link coloring OFF on input line 23. + +(/usr/share/texlive/texmf-dist/tex/latex/hyperref/nameref.sty +Package: nameref 2019/09/16 v2.46 Cross-referencing by name of section + +(/usr/share/texlive/texmf-dist/tex/latex/refcount/refcount.sty +Package: refcount 2019/12/15 v3.6 Data extraction from label references (HO) +) +(/usr/share/texlive/texmf-dist/tex/generic/gettitlestring/gettitlestring.sty +Package: gettitlestring 2019/12/15 v1.6 Cleanup title references (HO) +) +\c@section@level=\count337 +) +LaTeX Info: Redefining \ref on input line 23. +LaTeX Info: Redefining \pageref on input line 23. +LaTeX Info: Redefining \nameref on input line 23. +LaTeX Font Info: Overwriting symbol font `operators' in version `normal' +(Font) OT1/cmr/m/n --> OT1/cmss/m/n on input line 23. +LaTeX Font Info: Overwriting symbol font `operators' in version `bold' +(Font) OT1/cmr/bx/n --> OT1/cmss/b/n on input line 23. +\symnumbers=\mathgroup6 +\sympureletters=\mathgroup7 +LaTeX Font Info: Overwriting math alphabet `\mathrm' in version `normal' +(Font) OT1/cmss/m/n --> T1/cmr/m/n on input line 23. +LaTeX Font Info: Redeclaring math alphabet \mathbf on input line 23. +LaTeX Font Info: Overwriting math alphabet `\mathbf' in version `normal' +(Font) OT1/cmr/bx/n --> T1/FiraSans-OsF/b/n on input line 23. +LaTeX Font Info: Overwriting math alphabet `\mathbf' in version `bold' +(Font) OT1/cmr/bx/n --> T1/FiraSans-OsF/b/n on input line 23. +LaTeX Font Info: Redeclaring math alphabet \mathsf on input line 23. +LaTeX Font Info: Overwriting math alphabet `\mathsf' in version `normal' +(Font) OT1/cmss/m/n --> T1/FiraSans-OsF/m/n on input line 23. +LaTeX Font Info: Overwriting math alphabet `\mathsf' in version `bold' +(Font) OT1/cmss/bx/n --> T1/FiraSans-OsF/m/n on input line 23. + +LaTeX Font Info: Redeclaring math alphabet \mathit on input line 23. +LaTeX Font Info: Overwriting math alphabet `\mathit' in version `normal' +(Font) OT1/cmr/m/it --> T1/FiraSans-OsF/m/it on input line 23. + +LaTeX Font Info: Overwriting math alphabet `\mathit' in version `bold' +(Font) OT1/cmr/bx/it --> T1/FiraSans-OsF/m/it on input line 23 +. +LaTeX Font Info: Redeclaring math alphabet \mathtt on input line 23. +LaTeX Font Info: Overwriting math alphabet `\mathtt' in version `normal' +(Font) OT1/cmtt/m/n --> T1/FiraMono-TOsF/m/n on input line 23. + +LaTeX Font Info: Overwriting math alphabet `\mathtt' in version `bold' +(Font) OT1/cmtt/m/n --> T1/FiraMono-TOsF/m/n on input line 23. + +LaTeX Font Info: Overwriting symbol font `numbers' in version `bold' +(Font) T1/FiraSans-OsF/m/n --> T1/FiraSans-OsF/b/n on input li +ne 23. +LaTeX Font Info: Overwriting symbol font `pureletters' in version `bold' +(Font) T1/FiraSans-OsF/m/it --> T1/FiraSans-OsF/b/it on input +line 23. +LaTeX Font Info: Overwriting math alphabet `\mathrm' in version `bold' +(Font) OT1/cmss/b/n --> T1/cmr/b/n on input line 23. +LaTeX Font Info: Overwriting math alphabet `\mathbf' in version `bold' +(Font) T1/FiraSans-OsF/b/n --> T1/FiraSans-OsF/b/n on input li +ne 23. +LaTeX Font Info: Overwriting math alphabet `\mathsf' in version `bold' +(Font) T1/FiraSans-OsF/m/n --> T1/FiraSans-OsF/b/n on input li +ne 23. +LaTeX Font Info: Overwriting math alphabet `\mathit' in version `bold' +(Font) T1/FiraSans-OsF/m/it --> T1/FiraSans-OsF/b/it on input +line 23. +LaTeX Font Info: Overwriting math alphabet `\mathtt' in version `bold' +(Font) T1/FiraMono-TOsF/m/n --> T1/FiraMono-TOsF/b/n on input +line 23. + +(/usr/share/texlive/texmf-dist/tex/latex/translator/translator-basic-dictionary +-English.dict +Dictionary: translator-basic-dictionary, Language: English +) +(/usr/share/texlive/texmf-dist/tex/latex/translator/translator-bibliography-dic +tionary-English.dict +Dictionary: translator-bibliography-dictionary, Language: English +) +(/usr/share/texlive/texmf-dist/tex/latex/translator/translator-environment-dict +ionary-English.dict +Dictionary: translator-environment-dictionary, Language: English +) +(/usr/share/texlive/texmf-dist/tex/latex/translator/translator-months-dictionar +y-English.dict +Dictionary: translator-months-dictionary, Language: English +) +(/usr/share/texlive/texmf-dist/tex/latex/translator/translator-numbers-dictiona +ry-English.dict +Dictionary: translator-numbers-dictionary, Language: English +) +(/usr/share/texlive/texmf-dist/tex/latex/translator/translator-theorem-dictiona +ry-English.dict +Dictionary: translator-theorem-dictionary, Language: English +) +\c@mv@tabular=\count338 +\c@mv@boldtabular=\count339 +\c@lstlisting=\count340 + (./slide.nav) +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' in size <6> not available +(Font) Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp +ut line 23. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/n' will be +(Font) scaled to size 6.0pt on input line 23. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' in size <8> not available +(Font) Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp +ut line 23. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/n' will be +(Font) scaled to size 8.0pt on input line 23. +\openout2 = `content.aux'. + + (./content.tex +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' in size <20.74> not availa +ble +(Font) Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp +ut line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/n' will be +(Font) scaled to size 20.74pt on input line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/sc' in size <20.74> not avail +able +(Font) Font shape `T1/FiraSans-OsF/regular/sc' tried instead on in +put line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/sc' will be +(Font) scaled to size 20.74pt on input line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/b/sc' in size <20.74> not avail +able +(Font) Font shape `T1/FiraSans-OsF/bold/sc' tried instead on input + line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/bold/sc' will be +(Font) scaled to size 20.74pt on input line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' in size <14.4> not availab +le +(Font) Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp +ut line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/n' will be +(Font) scaled to size 14.4pt on input line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/sc' in size <14.4> not availa +ble +(Font) Font shape `T1/FiraSans-OsF/regular/sc' tried instead on in +put line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/sc' will be +(Font) scaled to size 14.4pt on input line 6. + +File: misp.pdf Graphic file (type pdf) + +Package pdftex.def Info: misp.pdf used on input line 6. +(pdftex.def) Requested size: 163.54448pt x 119.85817pt. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' in size <12> not available + +(Font) Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp +ut line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/n' will be +(Font) scaled to size 12.0pt on input line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/sc' in size <12> not availabl +e +(Font) Font shape `T1/FiraSans-OsF/regular/sc' tried instead on in +put line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/sc' will be +(Font) scaled to size 12.0pt on input line 6. +LaTeX Font Info: Trying to load font information for T1+FiraMono-TOsF on inp +ut line 6. + +(/usr/share/texlive/texmf-dist/tex/latex/fira/T1FiraMono-TOsF.fd +File: T1FiraMono-TOsF.fd 2019/10/10 (autoinst) Font definitions for T1/FiraMono +-TOsF. +) + +LaTeX Font Warning: Font shape `T1/FiraMono-TOsF/m/sc' undefined +(Font) using `T1/FiraMono-TOsF/m/n' instead on input line 6. + +LaTeX Font Info: Font shape `T1/FiraMono-TOsF/m/n' in size <12> not availabl +e +(Font) Font shape `T1/FiraMono-TOsF/regular/n' tried instead on in +put line 6. +LaTeX Font Info: Font shape `T1/FiraMono-TOsF/regular/n' will be +(Font) scaled to size 12.0pt on input line 6. +LaTeX Font Info: Trying to load font information for U+msa on input line 6. +(/usr/share/texlive/texmf-dist/tex/latex/amsfonts/umsa.fd +File: umsa.fd 2013/01/14 v3.01 AMS symbols A +) +LaTeX Font Info: Trying to load font information for U+msb on input line 6. + +(/usr/share/texlive/texmf-dist/tex/latex/amsfonts/umsb.fd +File: umsb.fd 2013/01/14 v3.01 AMS symbols B +) +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' in size <12> not availabl +e +(Font) Font shape `T1/FiraSans-OsF/regular/it' tried instead on in +put line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/it' will be +(Font) scaled to size 12.0pt on input line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' in size <8> not available + +(Font) Font shape `T1/FiraSans-OsF/regular/it' tried instead on in +put line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/it' will be +(Font) scaled to size 8.0pt on input line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' in size <6> not available + +(Font) Font shape `T1/FiraSans-OsF/regular/it' tried instead on in +put line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/it' will be +(Font) scaled to size 6.0pt on input line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' in size <4> not available +(Font) Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp +ut line 6. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/n' will be +(Font) scaled to size 4.0pt on input line 6. + [1 + + +{/var/lib/texmf/fonts/map/pdftex/updmap/pdftex.map} <./misp.pdf>] +LaTeX Font Info: Font shape `T1/FiraSans-OsF/b/n' in size <10.95> not availa +ble +(Font) Font shape `T1/FiraSans-OsF/bold/n' tried instead on input +line 17. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/bold/n' will be +(Font) scaled to size 10.95pt on input line 17. + [2 + +] +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' in size <10.95> not avail +able +(Font) Font shape `T1/FiraSans-OsF/regular/it' tried instead on in +put line 22. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/it' will be +(Font) scaled to size 10.95pt on input line 22. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' in size <9> not available +(Font) Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp +ut line 22. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/n' will be +(Font) scaled to size 9.0pt on input line 22. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' in size <5> not available +(Font) Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp +ut line 22. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/n' will be +(Font) scaled to size 5.0pt on input line 22. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' in size <9> not available + +(Font) Font shape `T1/FiraSans-OsF/regular/it' tried instead on in +put line 22. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/it' will be +(Font) scaled to size 9.0pt on input line 22. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' in size <5> not available + +(Font) Font shape `T1/FiraSans-OsF/regular/it' tried instead on in +put line 22. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/it' will be +(Font) scaled to size 5.0pt on input line 22. +LaTeX Font Info: Font shape `T1/FiraMono-TOsF/m/n' in size <9> not available + +(Font) Font shape `T1/FiraMono-TOsF/regular/n' tried instead on in +put line 22. +LaTeX Font Info: Font shape `T1/FiraMono-TOsF/regular/n' will be +(Font) scaled to size 9.0pt on input line 22. + [3 + +] + +File: en_cef.png Graphic file (type png) + +Package pdftex.def Info: en_cef.png used on input line 32. +(pdftex.def) Requested size: 258.00327pt x 36.85759pt. + [4 + + <./en_cef.png>] +[5 + +] + +File: misp-overview-simplified.pdf Graphic file (type pdf) + +Package pdftex.def Info: misp-overview-simplified.pdf used on input line 48. +(pdftex.def) Requested size: 283.09949pt x 147.16884pt. + [6 + + <./misp-overview-simplified.pdf>] +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' in size <10> not available + +(Font) Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp +ut line 63. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/n' will be +(Font) scaled to size 10.0pt on input line 63. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/n' in size <7> not available +(Font) Font shape `T1/FiraSans-OsF/regular/n' tried instead on inp +ut line 63. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/n' will be +(Font) scaled to size 7.0pt on input line 63. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' in size <10> not availabl +e +(Font) Font shape `T1/FiraSans-OsF/regular/it' tried instead on in +put line 63. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/it' will be +(Font) scaled to size 10.0pt on input line 63. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/m/it' in size <7> not available + +(Font) Font shape `T1/FiraSans-OsF/regular/it' tried instead on in +put line 63. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/regular/it' will be +(Font) scaled to size 7.0pt on input line 63. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/b/n' in size <10> not available + +(Font) Font shape `T1/FiraSans-OsF/bold/n' tried instead on input +line 63. +LaTeX Font Info: Font shape `T1/FiraSans-OsF/bold/n' will be +(Font) scaled to size 10.0pt on input line 63. + [7 + +] [8 + +] [9 + +] + +File: misp-flows.png Graphic file (type png) + +Package pdftex.def Info: misp-flows.png used on input line 109. +(pdftex.def) Requested size: 298.11302pt x 204.26262pt. + [10 + + <./misp-flows.png>] +[11 + +] [12 + +] + +File: waterfall.png Graphic file (type png) + +Package pdftex.def Info: waterfall.png used on input line 139. +(pdftex.def) Requested size: 264.38979pt x 207.77785pt. + [13 + + <./waterfall.png>] [14 + +] + +File: gru-1.png Graphic file (type png) + +Package pdftex.def Info: gru-1.png used on input line 155. +(pdftex.def) Requested size: 251.14018pt x 253.54921pt. + +Overfull \vbox (38.09299pt too high) detected at line 155 + [] + +[15 + + <./gru-1.png>] [16 + +] [17 + +] [18 + +] [19 + +]) +\tf@nav=\write5 +\openout5 = `slide.nav'. + +\tf@toc=\write6 +\openout6 = `slide.toc'. + +\tf@snm=\write7 +\openout7 = `slide.snm'. + +Package atveryend Info: Empty hook `BeforeClearDocument' on input line 25. +Package atveryend Info: Empty hook `AfterLastShipout' on input line 25. + (./slide.aux (./content.aux)) +Package atveryend Info: Executing hook `AtVeryEndDocument' on input line 25. +Package atveryend Info: Empty hook `AtEndAfterFileList' on input line 25. + + +LaTeX Font Warning: Some font shapes were not available, defaults substituted. + + ) +Here is how much of TeX's memory you used: + 26229 strings out of 481239 + 532505 string characters out of 5920377 + 787434 words of memory out of 5000000 + 40816 multiletter control sequences out of 15000+600000 + 901131 words of font info for 105 fonts, out of 8000000 for 9000 + 1141 hyphenation exceptions out of 8191 + 71i,16n,95p,811b,874s stack positions out of 5000i,500n,10000p,200000b,80000s +{/usr/share/texlive/texmf-dist/fonts/enc/dvips/fira/fir_iln36p.enc}{/usr/shar +e/texlive/texmf-dist/fonts/enc/dvips/fira/fir_d4q673.enc}{/usr/share/texlive/te +xmf-dist/fonts/enc/dvips/fira/fir_2mfh3o.enc} +Output written on slide.pdf (19 pages, 622276 bytes). +PDF statistics: + 202 PDF objects out of 1000 (max. 8388607) + 150 compressed objects within 2 object streams + 39 named destinations out of 1000 (max. 500000) + 73 words of extra memory for PDF output out of 10000 (max. 10000000) + diff --git a/x.16-misp-military-use-cases/slide.nav b/x.16-misp-military-use-cases/slide.nav new file mode 100644 index 0000000..bd2db22 --- /dev/null +++ b/x.16-misp-military-use-cases/slide.nav @@ -0,0 +1,43 @@ +\headcommand {\slideentry {0}{0}{1}{1/1}{}{0}} +\headcommand {\beamer@framepages {1}{1}} +\headcommand {\slideentry {0}{0}{2}{2/2}{}{0}} +\headcommand {\beamer@framepages {2}{2}} +\headcommand {\slideentry {0}{0}{3}{3/3}{}{0}} +\headcommand {\beamer@framepages {3}{3}} +\headcommand {\slideentry {0}{0}{4}{4/4}{}{0}} +\headcommand {\beamer@framepages {4}{4}} +\headcommand {\slideentry {0}{0}{5}{5/5}{}{0}} +\headcommand {\beamer@framepages {5}{5}} +\headcommand {\slideentry {0}{0}{6}{6/6}{}{0}} +\headcommand {\beamer@framepages {6}{6}} +\headcommand {\slideentry {0}{0}{7}{7/7}{}{0}} +\headcommand {\beamer@framepages {7}{7}} +\headcommand {\slideentry {0}{0}{8}{8/8}{}{0}} +\headcommand {\beamer@framepages {8}{8}} +\headcommand {\slideentry {0}{0}{9}{9/9}{}{0}} +\headcommand {\beamer@framepages {9}{9}} +\headcommand {\slideentry {0}{0}{10}{10/10}{}{0}} +\headcommand {\beamer@framepages {10}{10}} +\headcommand {\slideentry {0}{0}{11}{11/11}{}{0}} +\headcommand {\beamer@framepages {11}{11}} +\headcommand {\slideentry {0}{0}{12}{12/12}{}{0}} +\headcommand {\beamer@framepages {12}{12}} +\headcommand {\slideentry {0}{0}{13}{13/13}{}{0}} +\headcommand {\beamer@framepages {13}{13}} +\headcommand {\slideentry {0}{0}{14}{14/14}{}{0}} +\headcommand {\beamer@framepages {14}{14}} +\headcommand {\slideentry {0}{0}{15}{15/15}{}{0}} +\headcommand {\beamer@framepages {15}{15}} +\headcommand {\slideentry {0}{0}{16}{16/16}{}{0}} +\headcommand {\beamer@framepages {16}{16}} +\headcommand {\slideentry {0}{0}{17}{17/17}{}{0}} +\headcommand {\beamer@framepages {17}{17}} +\headcommand {\slideentry {0}{0}{18}{18/18}{}{0}} +\headcommand {\beamer@framepages {18}{18}} +\headcommand {\slideentry {0}{0}{19}{19/19}{}{0}} +\headcommand {\beamer@framepages {19}{19}} +\headcommand {\beamer@partpages {1}{19}} +\headcommand {\beamer@subsectionpages {1}{19}} +\headcommand {\beamer@sectionpages {1}{19}} +\headcommand {\beamer@documentpages {19}} +\headcommand {\gdef \inserttotalframenumber {18}} diff --git a/x.16-misp-military-use-cases/slide.pdf b/x.16-misp-military-use-cases/slide.pdf new file mode 100644 index 0000000..ad8dec8 Binary files /dev/null and b/x.16-misp-military-use-cases/slide.pdf differ diff --git a/x.16-misp-military-use-cases/slide.snm b/x.16-misp-military-use-cases/slide.snm new file mode 100644 index 0000000..e69de29 diff --git a/x.16-misp-military-use-cases/slide.tex b/x.16-misp-military-use-cases/slide.tex new file mode 100644 index 0000000..db6618e --- /dev/null +++ b/x.16-misp-military-use-cases/slide.tex @@ -0,0 +1,26 @@ +% !TEX program = XeLaTeX +\documentclass{beamer} +\usetheme[numbering=progressbar]{focus} +\definecolor{main}{RGB}{47, 161, 219} +\definecolor{textcolor}{RGB}{128, 128, 128} +\definecolor{background}{RGB}{240, 247, 255} + +\usepackage[utf8]{inputenc} +\usepackage{tikz} +\usepackage{listings} +\usetikzlibrary{positioning} +\usetikzlibrary{shapes,arrows} + + +\title{MISP Open Source Threat Intelligence and Sharing Plaform} +\subtitle{Military Use Cases} +\author{Alexandre Dulaunoy} +\date{20240507} +\titlegraphic{\includegraphics[scale=0.85]{misp.pdf}} +\institute{MISP Project \\ \url{https://www.misp-project.org/}} + + +\begin{document} +\include{content} +\end{document} + diff --git a/x.16-misp-military-use-cases/slide.toc b/x.16-misp-military-use-cases/slide.toc new file mode 100644 index 0000000..e69de29 diff --git a/x.16-misp-military-use-cases/slide_es.tex b/x.16-misp-military-use-cases/slide_es.tex new file mode 100644 index 0000000..a713361 --- /dev/null +++ b/x.16-misp-military-use-cases/slide_es.tex @@ -0,0 +1,25 @@ +\documentclass{beamer} +\usetheme[numbering=progressbar]{focus} +\definecolor{main}{RGB}{47, 161, 219} +\definecolor{textcolor}{RGB}{128, 128, 128} +\definecolor{background}{RGB}{240, 247, 255} + +\usepackage[utf8]{inputenc} +\usepackage{tikz} +\usepackage{listings} +\usetikzlibrary{positioning} +\usetikzlibrary{shapes,arrows} + + +\title{Una introducción al Intercambio de Información de Ciberseguridad} +\subtitle{MISP - Threat Sharing} +\author{\small{\input{../includes/authors.txt}}} +\date{\input{../includes/location.txt}} +\titlegraphic{\includegraphics[scale=0.85]{misp.pdf}} +\institute{MISP Project \\ \url{https://www.misp-project.org/}} + + +\begin{document} +\include{content_es} +\end{document} + diff --git a/x.16-misp-military-use-cases/slide_handout.tex b/x.16-misp-military-use-cases/slide_handout.tex new file mode 100644 index 0000000..6a83c1a --- /dev/null +++ b/x.16-misp-military-use-cases/slide_handout.tex @@ -0,0 +1,28 @@ +% !TEX program = XeLaTeX +\documentclass{beamer} +\usetheme[numbering=progressbar]{focus} +\definecolor{main}{RGB}{47, 161, 219} +\definecolor{textcolor}{RGB}{128, 128, 128} +\definecolor{background}{RGB}{240, 247, 255} + +\usepackage[utf8]{inputenc} +\usepackage{tikz} +\usepackage{listings} +\usetikzlibrary{positioning} +\usepackage{pgfpages} +\setbeameroption{show notes on second screen=right} +\usetikzlibrary{shapes,arrows} + + +\title{An Introduction to Cybersecurity Information Sharing} +\subtitle{MISP - Threat Sharing} +\author{\small{\input{../includes/authors.txt}}} +\date{\input{../includes/location.txt}} +\titlegraphic{\includegraphics[scale=0.85]{misp.pdf}} +\institute{MISP Project \\ \url{https://www.misp-project.org/}} + + +\begin{document} +\include{content} +\end{document} + diff --git a/x.16-misp-military-use-cases/slide_nl.tex b/x.16-misp-military-use-cases/slide_nl.tex new file mode 100644 index 0000000..2d361a9 --- /dev/null +++ b/x.16-misp-military-use-cases/slide_nl.tex @@ -0,0 +1,25 @@ +\documentclass{beamer} +\usetheme[numbering=progressbar]{focus} +\definecolor{main}{RGB}{47, 161, 219} +\definecolor{textcolor}{RGB}{128, 128, 128} +\definecolor{background}{RGB}{240, 247, 255} + +\usepackage[utf8]{inputenc} +\usepackage{tikz} +\usepackage{listings} +\usetikzlibrary{positioning} +\usetikzlibrary{shapes,arrows} + + +\title{Inleiding tot het Delen van Cybersecurity Informatie} +\subtitle{MISP - Threat Sharing} +\author{\small{\input{../includes/authors.txt}}} +\date{\input{../includes/location.txt}} +\titlegraphic{\includegraphics[scale=0.85]{misp.pdf}} +\institute{MISP Project \\ \url{https://www.misp-project.org/}} + + +\begin{document} +\include{content_nl} +\end{document} + diff --git a/x.16-misp-military-use-cases/tags-2-4-70.png b/x.16-misp-military-use-cases/tags-2-4-70.png new file mode 100644 index 0000000..e1c6fbd Binary files /dev/null and b/x.16-misp-military-use-cases/tags-2-4-70.png differ diff --git a/x.16-misp-military-use-cases/taxonomy-workflow.png b/x.16-misp-military-use-cases/taxonomy-workflow.png new file mode 100644 index 0000000..f4789ad Binary files /dev/null and b/x.16-misp-military-use-cases/taxonomy-workflow.png differ diff --git a/x.16-misp-military-use-cases/texput.log b/x.16-misp-military-use-cases/texput.log new file mode 100644 index 0000000..aa43b7d --- /dev/null +++ b/x.16-misp-military-use-cases/texput.log @@ -0,0 +1,21 @@ +This is pdfTeX, Version 3.14159265-2.6-1.40.20 (TeX Live 2019/Debian) (preloaded format=pdflatex 2024.3.16) 7 MAY 2024 14:10 +entering extended mode + restricted \write18 enabled. + %&-line parsing enabled. +**mai + +! Emergency stop. +<*> mai + +End of file on the terminal! + + +Here is how much of TeX's memory you used: + 4 strings out of 481239 + 107 string characters out of 5920377 + 236563 words of memory out of 5000000 + 15373 multiletter control sequences out of 15000+600000 + 532338 words of font info for 24 fonts, out of 8000000 for 9000 + 1141 hyphenation exceptions out of 8191 + 0i,0n,0p,8b,6s stack positions out of 5000i,500n,10000p,200000b,80000s +! ==> Fatal error occurred, no output PDF file produced! diff --git a/x.16-misp-military-use-cases/timeline-misp-overview.png b/x.16-misp-military-use-cases/timeline-misp-overview.png new file mode 100644 index 0000000..23ff19b Binary files /dev/null and b/x.16-misp-military-use-cases/timeline-misp-overview.png differ diff --git a/x.16-misp-military-use-cases/warning-list-event.png b/x.16-misp-military-use-cases/warning-list-event.png new file mode 100644 index 0000000..22c6423 Binary files /dev/null and b/x.16-misp-military-use-cases/warning-list-event.png differ diff --git a/x.16-misp-military-use-cases/warning-list.png b/x.16-misp-military-use-cases/warning-list.png new file mode 100644 index 0000000..f151ded Binary files /dev/null and b/x.16-misp-military-use-cases/warning-list.png differ diff --git a/x.16-misp-military-use-cases/waterfall.png b/x.16-misp-military-use-cases/waterfall.png new file mode 100644 index 0000000..560f5ed Binary files /dev/null and b/x.16-misp-military-use-cases/waterfall.png differ diff --git a/x.16-misp-military-use-cases/workflow_initial.png b/x.16-misp-military-use-cases/workflow_initial.png new file mode 100644 index 0000000..7c6b54c Binary files /dev/null and b/x.16-misp-military-use-cases/workflow_initial.png differ diff --git a/x.16-misp-military-use-cases/workflow_initial2.png b/x.16-misp-military-use-cases/workflow_initial2.png new file mode 100644 index 0000000..d384c34 Binary files /dev/null and b/x.16-misp-military-use-cases/workflow_initial2.png differ diff --git a/x.16-misp-military-use-cases/x-isac-logo.png b/x.16-misp-military-use-cases/x-isac-logo.png new file mode 100755 index 0000000..21c68bc Binary files /dev/null and b/x.16-misp-military-use-cases/x-isac-logo.png differ