BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//Crimson7//Cybersec Europe 2026//EN
CALSCALE:GREGORIAN
METHOD:PUBLISH
BEGIN:VTIMEZONE
TZID:Europe/Brussels
BEGIN:DAYLIGHT
TZOFFSETFROM:+0100
TZOFFSETTO:+0200
TZNAME:CEST
DTSTART:19700329T020000
RRULE:FREQ=YEARLY;BYMONTH=3;BYDAY=-1SU
END:DAYLIGHT
BEGIN:STANDARD
TZOFFSETFROM:+0200
TZOFFSETTO:+0100
TZNAME:CET
DTSTART:19701025T030000
RRULE:FREQ=YEARLY;BYMONTH=10;BYDAY=-1SU
END:STANDARD
END:VTIMEZONE
BEGIN:VEVENT
UID:cs26-talk2@crimson7.io
DTSTAMP:20260428T120000Z
DTSTART;TZID=Europe/Brussels:20260521T143000
DTEND;TZID=Europe/Brussels:20260521T150000
SUMMARY:Never Hunt Alone: A Threat Hunting Companion for the SOC — Crimson7 @ Cybersec Europe Brussels
LOCATION:Theater 5\, Cybersec Europe Brussels\, Brussels Expo
URL:https://crimson7.io/lp/cs26
DESCRIPTION:Joey Verleg (Head of Managed Services\, Crimson7).\n\nIn this session Crimson7 will show how to turn threat hunting from "tribal knowledge" into a repeatable\, measurable workflow using 7Hunter. We'll demo how teams can go from a CTI lead or hypothesis to an executable hunt in minutes by browsing 4\,280+ pre-built KQL queries and 75+ investigation runbooks\, all mapped to MITRE ATT&CK so you can see what techniques you actually cover. You'll see one-click export to Microsoft Sentinel with automatic hunt creation\, how an AI assistant can run live KQL during an investigation to speed iteration\, and how the public REST API plugs into SOAR pipelines. The goal: faster hunts\, fewer blind spots\, and real visibility into your hunting posture\, without rebuilding queries from scratch every time.\n\nFull details: https://crimson7.io/lp/cs26
END:VEVENT
END:VCALENDAR
