chg: [ENISA] CTI slides skeleton

events/20221207-ENISA-CTI-EU/content.aux

@@ -0,0 +1,102 @@
+\relax 
+\providecommand\hyper@newdestlabel[2]{}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{1}{1/1}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {1}{1}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{2}{2/2}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {2}{2}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{3}{3/3}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {3}{3}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{4}{4/4}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {4}{4}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{5}{5/5}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {5}{5}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{6}{6/6}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {6}{6}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{7}{7/7}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {7}{7}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{8}{8/8}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {8}{8}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{9}{9/9}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {9}{9}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{10}{10/10}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {10}{10}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{11}{11/11}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {11}{11}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{12}{12/12}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {12}{12}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{13}{13/13}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {13}{13}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{14}{14/14}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {14}{14}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{15}{15/15}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {15}{15}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{16}{16/16}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {16}{16}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{17}{17/17}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {17}{17}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{18}{18/18}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {18}{18}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{19}{19/19}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {19}{19}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{20}{20/20}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {20}{20}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{21}{21/21}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {21}{21}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{22}{22/22}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {22}{22}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{23}{23/23}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {23}{23}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{24}{24/24}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {24}{24}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{25}{25/25}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {25}{25}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{26}{26/26}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {26}{26}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{27}{27/27}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {27}{27}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{28}{28/28}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {28}{28}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{29}{29/29}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {29}{29}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{30}{30/30}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {30}{30}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{31}{31/31}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {31}{31}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{32}{32/32}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {32}{32}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{33}{33/33}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {33}{33}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{34}{34/34}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {34}{34}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{35}{35/35}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {35}{35}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{36}{36/36}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {36}{36}}}
+\@writefile{nav}{\headcommand {\slideentry {0}{0}{37}{37/37}{}{0}}}
+\@writefile{nav}{\headcommand {\beamer@framepages {37}{37}}}
+\@setckpt{content}{
+\setcounter{page}{38}
+\setcounter{equation}{0}
+\setcounter{enumi}{0}
+\setcounter{enumii}{0}
+\setcounter{enumiii}{0}
+\setcounter{enumiv}{0}
+\setcounter{footnote}{6}
+\setcounter{mpfootnote}{0}
+\setcounter{beamerpauses}{1}
+\setcounter{bookmark@seq@number}{0}
+\setcounter{lecture}{0}
+\setcounter{part}{0}
+\setcounter{section}{0}
+\setcounter{subsection}{0}
+\setcounter{subsubsection}{0}
+\setcounter{subsectionslide}{37}
+\setcounter{framenumber}{36}
+\setcounter{figure}{0}
+\setcounter{table}{0}
+\setcounter{parentequation}{0}
+\setcounter{theorem}{0}
+\setcounter{lstnumber}{1}
+\setcounter{section@level}{0}
+\setcounter{lstlisting}{0}
+}

events/20221207-ENISA-CTI-EU/content.tex

@@ -0,0 +1,338 @@
+% DO NOT COMPILE THIS FILE DIRECTLY!
+% This is included by the other .tex files.
+
+\begin{frame}
+\titlepage
+\end{frame}
+
+\begin{frame}
+\frametitle{What is MISP?}
+\begin{itemize}
+       \item MISP is a {\bf threat information sharing} platform that is free \& open source software
+       \item A tool that {\bf collects} information from partners, your analysts, your tools, feeds
+       \item Normalises, {\bf correlates}, {\bf enriches} and {\bf connects} the data
+       \item Allows teams and communities to {\bf collaborate} and {\bf share}
+       \item {\bf Feeds} automated protective tools and analyst tools with the output
+       \item MISP is a {\bf complete threat intelligence platform} with strong sharing capabilities and extendability
+\end{itemize}
+\end{frame}
+
+\begin{frame}[plain,c]
+    \begin{center}
+    {\Huge Two years from now, threat intelligence will be easy.\\}
+        {\it Bill Gates if he did work in threat intelligence}
+    \end{center}
+\end{frame}
+
+
+\begin{frame}
+  \frametitle{The aim of this presentation}
+  \begin{itemize}
+      \item {\Large Showing the {\bf evolution of threat intelligence}\footnote{based on our empirical view from users using/integrating MISP} and 
+      \item {\bf data-driven threat hunting} over the past years}
+      \item {\Large What can we expect in {\bf the future}?}
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{From standalone indicator to advanced object data models}
+  \begin{itemize}
+    \item In early 2010, MISP supported basic indicators sharing with a limited set of types
+    \item In 2022, MISP integrates a dynamic object model with advanced custom relationships 
+    \item Why such evolution?
+        \begin{itemize}
+            \item {\bf Increase of intelligence usage in different sectors}. From threat-hunting\footnote{With different types of threat hunts including TTP-driven, intelligence-driven, asset-driven...} to risk assessment or strategic decisions
+            \item {\bf Increased diversity among analysts}
+        \end{itemize}
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Multitude of intelligence models}
+  \begin{itemize}
+     \item Chains, triangles, circles, diamonds, arrows, a mix or even a multi-layer matrix
+     \item There is {\bf no perfect intelligence models}
+     \item Organisations invent their model, reuse existing ones or are even more creative
+     \item Showing {\bf how diverse\footnote{Embrace the diversity of models, taxonomies} our societies are}
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Main focus was securing our data and tooling}
+  \begin{itemize}
+      \item Current {\bf geo-political situation} lead to new challenges
+      \item It has been an interesting time period with quite some activity
+      \item Our goal was to {\bf shore up the security} aspects of MISP and Cerebrate
+      \item Build new functionalities and tools to allow users to {\bf protect their data}
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Sharing group blueprints}
+  \begin{itemize}
+     \item Solving the issue of {\bf sharing group lifecycle management}
+     \item Build SG blueprints for reusable, maintainable sharing groups
+     \item Abstract sharing groups, organisation metadata as building blocks
+     \item Solve newly arising sharing challenges
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+\frametitle{Sharing group blueprints}
+\includegraphics[scale=0.6]{images/blueprints2.png}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Cryptographic signing and tamper protection}
+  \begin{itemize}
+     \item Need to be able to share and ensure the {\bf veracity of critical events}
+     \item Tampering by {\bf malicious intermediaries}, even in closed networks became a new fear
+     \item We came up with a solution that allows us to {\bf lock down critical events}
+     \item Limits the distribution, but {\bf increases the resilience} of MISP immensely
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+\frametitle{Cryptographic signing and tamper protection}
+\includegraphics[scale=0.5]{images/signing1.png}
+\end{frame}
+
+\begin{frame}
+\frametitle{Cryptographic signing and tamper protection}
+\includegraphics[scale=0.5]{images/signing2.png}
+\end{frame}
+
+\begin{frame}
+\frametitle{Cryptographic signing and tamper protection}
+\includegraphics[scale=0.6]{images/signing3.png}
+\includegraphics[scale=0.6]{images/signing4.png}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Other major improvements}
+  \begin{itemize}
+      \item Various other new functionalities that improve our day to day use of the tool
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Long list of security fixes}
+  \begin{itemize}
+      \item Partially from user reports
+      \item Partially by an exhaustive pentest series
+      \item Massive thank you to {\bf Zigrin Security} for conducting the tests...
+      \item ...and to the {\bf Luxembourgish Army} for financing it
+      \item Multiple {\bf CVEs} resolved, including a {\bf critical one that required a silent release}
+      \item Make sure you stay up to date!
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+\frametitle{Long list of security fixes}
+\includegraphics[scale=0.4]{images/security.png}
+\end{frame}
+
+
+\begin{frame}
+  \frametitle{Event warning system}
+  \begin{itemize}
+     \item Build a rule based tool that analyses an event and {\bf recommends improvements}
+     \item Typical issues easily caught (missing TLP, lack of context, etc)
+     \item Simple to extend, flexible
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+\frametitle{Event warning system}
+\includegraphics[scale=0.3]{images/warnings.png}
+\end{frame}
+
+
+\begin{frame}
+  \frametitle{Massive rework of the STIX integrations}
+  \begin{itemize}
+     \item Our resident STIX guru (Christian Studer) has become {\bf co-chair of the STIX commitee} at OASIS
+     \item Massive rework of how we handle {\bf STIX ingestion / generation}
+     \item Continuous work with {\bf MITRE/CISA} to improve the integration
+     \item STIX subsystem spun off as a standalone system {\bf misp-stix}\footnote{\url{https://github.com/MISP/misp-stix}}
+     \item Can be used a standalone to convert in both directions MISP standard format to all the STIX variantes
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Further synchronisation filtering methods}
+  \begin{itemize}
+     \item The ability to {\bf exclude} certain attribute {\bf types from the synchronisation}
+     \item Comes with some risks, but solves some issues
+     \item An example: {\bf Exclusion of malware samples when sharing towards classified networks}
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Advanced timelining}
+  \begin{itemize}
+     \item Rework of the timelining in MISP
+     \item Inclusion of images, sightings
+     \item Various other improvements
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+\frametitle{Timelining}
+\includegraphics[scale=0.2]{images/timelining.png}
+\end{frame}
+
+\begin{frame}
+  \frametitle{New background processor}
+  \begin{itemize}
+     \item Since late November last year we have had a {\bf new background processing engine}
+     \item Fully optional for now
+     \item Lean, closer to an OS native implementation via {\bf Supervisor}
+     \item Gets rid of a lot of the baggage of our previous system (scheduling)
+     \item Implemetation by @righel (Luciano Righetti)
+  \end{itemize}
+\end{frame}
+
+
+\begin{frame}
+  \frametitle{Long list of other fixes}
+  \begin{itemize}
+     \item Usability fixes
+     \item Performance improvements
+     \item Bug fixes
+     \item Too many improvements to the galaxies, taxonomies, object templates to list!
+     \item Huge thank you to {\bf Jakub Onderka} for the {\bf constant stream of improvements}
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Workflows in MISP}
+  \begin{itemize}
+     \item Outcome of our initial work from GeekWeek 7.5\footnote{\href{https://cyber.gc.ca/en/events/geekweek-75}{Workshop organized by the Canadian Cyber Center}}
+     \item Goal: Modifying the execution of certain {\bf core functionalities}
+     \item Basically a {\bf hooking mechanism}
+     \item Modular approach using {\bf MISP-modules} or {\bf PHP modules}
+     \item Build and execute admin defined tasks on various actions
+     \item Modify data in place, block, fire-and-forget
+     \item All exposed via a {\bf completely new GUI}
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Workflows in MISP}
+  \begin{itemize}
+     \item {\bf Branching} codebase
+     \item Context sensitive, per-module filters
+     \item Implemented by our UI expert Sami "GraphMan" Mokaddem 
+  \end{itemize}
+\end{frame}
+
+
+\begin{frame}
+\frametitle{Workflows in MISP}
+\includegraphics[scale=0.2]{images/workflows1.png}
+\end{frame}
+
+\begin{frame}
+\frametitle{Workflows in MISP}
+\includegraphics[scale=0.2]{images/workflows2.png}
+\end{frame}
+
+
+\begin{frame}
+  \frametitle{External data guard}
+  \begin{itemize}
+     \item Work in {\bf collaboration with BICES}
+     \item Proxy server\footnote{\url{https://github.com/MISP/misp-guard}} that {\bf inspects and blocks potential data leaks} during synchronisation
+     \item Standalone
+     \item Simplistic design and {\bf easy to audit}
+     \item Modular {\bf rule based} system
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Various reworks to support STIX mappings}
+  \begin{itemize}
+     \item {\bf Relationships for tags/galaxies}
+     \item {\bf Templating} for galaxy cluster creation
+     \item Dot notation {\bf deep cluster elements}
+     \item Built in {\bf TAXII 2.1 export support} with the help of MITRE/CISA
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+\frametitle{Quick Cerebrate update}
+\begin{center}
+\includegraphics[scale=0.4]{images/cerebrate.png}
+\end{center}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Quick Cerebrate update}
+  \begin{itemize}
+     \item 5 new releases
+     \item Deployment for the {\bf CSIRT network} ongoing
+     \item A host of new functionalities to solve day to day issues we have in the CSIRT community
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{User management}
+  \begin{itemize}
+     \item Reworked completely
+     \item Tight integration with {\bf KeyCloak}
+     \item Full user provisioning / maintaining via Cerebrate
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Reworked meta information system}
+  \begin{itemize}
+     \item Introduction of {\bf context specific custom fields}
+     \item Custom {\bf search algorithms} (for example CIDR block lookups for constituency information)
+     \item Customisable and {\bf blueprint-able data model}
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{API along with its documentation fleshed out}
+  \begin{itemize}
+     \item {\bf OpenAPI integration} similarly to MISP
+     \item Integration tests and introduction of a {\bf CI pipeline}
+     \item Documentation and API examples available in Cerebrate directly
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Security fixes}
+  \begin{itemize}
+     \item Cerebrate, similarly to MISP received an in-depth pentest by {\bf Zigrin Security}
+     \item Likewise funded by the {\bf Luxembourgish Army}
+     \item Besides fixes to vulnerabilities, a host of usability findings and fixes
+     \item {\bf 5 CVEs} published
+     \item \url{https://www.cerebrate-project.org/security.html}
+  \end{itemize}
+\end{frame}
+
+\begin{frame}
+  \frametitle{Get in touch if you have any questions}
+  \begin{itemize}
+    \item Contact CIRCL
+    \begin{itemize}
+      \item info@circl.lu
+      \item \url{https://twitter.com/circl_lu}
+      \item \url{https://www.circl.lu/}
+    \end{itemize}
+    \item Contact MISPProject 
+    \begin{itemize}
+      \item \url{https://github.com/MISP}
+      \item \url{https://gitter.im/MISP/MISP}
+      \item \url{https://twitter.com/MISPProject}
+    \end{itemize}
+    \item Cerebrate project
+    \begin{itemize}
+      \item \url{https://github.com/cerebrate-project}
+      \item \url{https://github.com/cerebrate-project/cerebrate}
+    \end{itemize}
+  \end{itemize}
+\end{frame}

events/20221207-ENISA-CTI-EU/makefile

@@ -0,0 +1,5 @@
+all:
+	pdflatex -interaction nonstopmode -halt-on-error -file-line-error slide.tex
+
+clean:
+	rm *.aux *.nav *.log *.snm *.toc *.vrb

events/20221207-ENISA-CTI-EU/slide.aux

@@ -0,0 +1,27 @@
+\relax 
+\providecommand\hyper@newdestlabel[2]{}
+\providecommand\BKM@entry[2]{}
+\providecommand\HyperFirstAtBeginDocument{\AtBeginDocument}
+\HyperFirstAtBeginDocument{\ifx\hyper@anchor\@undefined
+\global\let\oldcontentsline\contentsline
+\gdef\contentsline#1#2#3#4{\oldcontentsline{#1}{#2}{#3}}
+\global\let\oldnewlabel\newlabel
+\gdef\newlabel#1#2{\newlabelxx{#1}#2}
+\gdef\newlabelxx#1#2#3#4#5#6{\oldnewlabel{#1}{{#2}{#3}}}
+\AtEndDocument{\ifx\hyper@anchor\@undefined
+\let\contentsline\oldcontentsline
+\let\newlabel\oldnewlabel
+\fi}
+\fi}
+\global\let\hyper@last\relax 
+\gdef\HyperFirstAtBeginDocument#1{#1}
+\providecommand\HyField@AuxAddToFields[1]{}
+\providecommand\HyField@AuxAddToCoFields[2]{}
+\@input{content.aux}
+\providecommand \oddpage@label [2]{}
+\pgfsyspdfmark {pgfid1}{1398509}{16990454}
+\@writefile{nav}{\headcommand {\beamer@partpages {1}{37}}}
+\@writefile{nav}{\headcommand {\beamer@subsectionpages {1}{37}}}
+\@writefile{nav}{\headcommand {\beamer@sectionpages {1}{37}}}
+\@writefile{nav}{\headcommand {\beamer@documentpages {37}}}
+\@writefile{nav}{\headcommand {\gdef \inserttotalframenumber {36}}}

events/20221207-ENISA-CTI-EU/slide.nav

@@ -0,0 +1,79 @@
+\headcommand {\slideentry {0}{0}{1}{1/1}{}{0}}
+\headcommand {\beamer@framepages {1}{1}}
+\headcommand {\slideentry {0}{0}{2}{2/2}{}{0}}
+\headcommand {\beamer@framepages {2}{2}}
+\headcommand {\slideentry {0}{0}{3}{3/3}{}{0}}
+\headcommand {\beamer@framepages {3}{3}}
+\headcommand {\slideentry {0}{0}{4}{4/4}{}{0}}
+\headcommand {\beamer@framepages {4}{4}}
+\headcommand {\slideentry {0}{0}{5}{5/5}{}{0}}
+\headcommand {\beamer@framepages {5}{5}}
+\headcommand {\slideentry {0}{0}{6}{6/6}{}{0}}
+\headcommand {\beamer@framepages {6}{6}}
+\headcommand {\slideentry {0}{0}{7}{7/7}{}{0}}
+\headcommand {\beamer@framepages {7}{7}}
+\headcommand {\slideentry {0}{0}{8}{8/8}{}{0}}
+\headcommand {\beamer@framepages {8}{8}}
+\headcommand {\slideentry {0}{0}{9}{9/9}{}{0}}
+\headcommand {\beamer@framepages {9}{9}}
+\headcommand {\slideentry {0}{0}{10}{10/10}{}{0}}
+\headcommand {\beamer@framepages {10}{10}}
+\headcommand {\slideentry {0}{0}{11}{11/11}{}{0}}
+\headcommand {\beamer@framepages {11}{11}}
+\headcommand {\slideentry {0}{0}{12}{12/12}{}{0}}
+\headcommand {\beamer@framepages {12}{12}}
+\headcommand {\slideentry {0}{0}{13}{13/13}{}{0}}
+\headcommand {\beamer@framepages {13}{13}}
+\headcommand {\slideentry {0}{0}{14}{14/14}{}{0}}
+\headcommand {\beamer@framepages {14}{14}}
+\headcommand {\slideentry {0}{0}{15}{15/15}{}{0}}
+\headcommand {\beamer@framepages {15}{15}}
+\headcommand {\slideentry {0}{0}{16}{16/16}{}{0}}
+\headcommand {\beamer@framepages {16}{16}}
+\headcommand {\slideentry {0}{0}{17}{17/17}{}{0}}
+\headcommand {\beamer@framepages {17}{17}}
+\headcommand {\slideentry {0}{0}{18}{18/18}{}{0}}
+\headcommand {\beamer@framepages {18}{18}}
+\headcommand {\slideentry {0}{0}{19}{19/19}{}{0}}
+\headcommand {\beamer@framepages {19}{19}}
+\headcommand {\slideentry {0}{0}{20}{20/20}{}{0}}
+\headcommand {\beamer@framepages {20}{20}}
+\headcommand {\slideentry {0}{0}{21}{21/21}{}{0}}
+\headcommand {\beamer@framepages {21}{21}}
+\headcommand {\slideentry {0}{0}{22}{22/22}{}{0}}
+\headcommand {\beamer@framepages {22}{22}}
+\headcommand {\slideentry {0}{0}{23}{23/23}{}{0}}
+\headcommand {\beamer@framepages {23}{23}}
+\headcommand {\slideentry {0}{0}{24}{24/24}{}{0}}
+\headcommand {\beamer@framepages {24}{24}}
+\headcommand {\slideentry {0}{0}{25}{25/25}{}{0}}
+\headcommand {\beamer@framepages {25}{25}}
+\headcommand {\slideentry {0}{0}{26}{26/26}{}{0}}
+\headcommand {\beamer@framepages {26}{26}}
+\headcommand {\slideentry {0}{0}{27}{27/27}{}{0}}
+\headcommand {\beamer@framepages {27}{27}}
+\headcommand {\slideentry {0}{0}{28}{28/28}{}{0}}
+\headcommand {\beamer@framepages {28}{28}}
+\headcommand {\slideentry {0}{0}{29}{29/29}{}{0}}
+\headcommand {\beamer@framepages {29}{29}}
+\headcommand {\slideentry {0}{0}{30}{30/30}{}{0}}
+\headcommand {\beamer@framepages {30}{30}}
+\headcommand {\slideentry {0}{0}{31}{31/31}{}{0}}
+\headcommand {\beamer@framepages {31}{31}}
+\headcommand {\slideentry {0}{0}{32}{32/32}{}{0}}
+\headcommand {\beamer@framepages {32}{32}}
+\headcommand {\slideentry {0}{0}{33}{33/33}{}{0}}
+\headcommand {\beamer@framepages {33}{33}}
+\headcommand {\slideentry {0}{0}{34}{34/34}{}{0}}
+\headcommand {\beamer@framepages {34}{34}}
+\headcommand {\slideentry {0}{0}{35}{35/35}{}{0}}
+\headcommand {\beamer@framepages {35}{35}}
+\headcommand {\slideentry {0}{0}{36}{36/36}{}{0}}
+\headcommand {\beamer@framepages {36}{36}}
+\headcommand {\slideentry {0}{0}{37}{37/37}{}{0}}
+\headcommand {\beamer@framepages {37}{37}}
+\headcommand {\beamer@partpages {1}{37}}
+\headcommand {\beamer@subsectionpages {1}{37}}
+\headcommand {\beamer@sectionpages {1}{37}}
+\headcommand {\beamer@documentpages {37}}
+\headcommand {\gdef \inserttotalframenumber {36}}

events/20221207-ENISA-CTI-EU/slide.tex

@@ -0,0 +1,25 @@
+\documentclass{beamer}
+\usetheme[numbering=progressbar]{focus}
+\definecolor{main}{RGB}{47, 161, 219}
+\definecolor{textcolor}{RGB}{128, 128, 128}
+\definecolor{background}{RGB}{240, 247, 255}
+
+\usepackage[utf8]{inputenc}
+\usepackage{tikz}
+\usepackage{listings}
+\usepackage{adjustbox}
+\usetikzlibrary{positioning}
+\usetikzlibrary{shapes,arrows}
+%\usepackage[T1]{fontenc}
+%\usepackage[scaled]{beramono}
+\author{\small{\input{../../includes/authors.txt}}}
+\title{10 years of MISP}
+\subtitle{{\small What's next in threat intelligence information sharing?}}
+\institute{\includegraphics[scale=0.5]{misplogo.pdf}}
+\titlegraphic{\includegraphics[scale=0.85]{misp.pdf}}
+
+\date{\input{../../includes/location.txt}}
+\begin{document}
+\include{content}
+\end{document}
+