This training will provide an in-depth presentation, based on real practical experience (of a group of CSIRT experts from TunCERT and CSIRT.tn), of various open source tools of interest for CSIRT activities and Internal information system implementation. Virtual capacity 15 maximum.
Professor Nabil Sahli is a Professor in computer Science . He was the first CEO (founder) of the National Agency for Computer Security (ANSI, "Agence Nationale de Sécurité Informatique," TUNISIA) and Chief (founder) of the National CERT "TunCERT" (from 2004 to 2007), and General Director of the national Unit, in charge of developing national cybersecurity (UO-PDSI, from 2002 to 2004). He is currently Senior Consultant at TunCERT and at the National Agency for Computer Security, along with other consultancy positions at national and international organizations.
Prof Nabil Sahli, is the first "Fellows member" of the OIC-CERT, the forum of CERTs of the OIC countries, as co-founder of this forum and, previously, member of the "council of elders" of AfricaCERT, the forum of African CERTs, also as co-founder of this forum.
Professor Nabil Sahli is currently, the General Director of academic studies at the Navy Academy and Chief of the Research Unit "Security of Critical Systems", sponsored by the Ministry of Defense and the Ministry of Scientific research and high education, and he was also the Founder and CTO of a Research and Development company (Biodata Carthago), a subsidiary of an International company (Biodata IT AG, based in Germany), specialized in the development of security tools (PC and Distributed Firewalls).
Mohamed Ali Benmabrouk is the Head of the Head of Watch, Alert, and Warning Division-tunCERT. He has been working at
TunCERT since 2010 and is passionate about open source tools. He was involved the set up sectorial CERTs in Tunisia from 2017
like the Financial CERT (FIRST Member): https://www.financialcert.tn/ and assists them with developing processes and completing tasks within open source tools.
Amine Rached is a Cybersecurity Specialist with more than 18 years of experience in this field, graduated with distinction, with an information system master degree. Skilled information security specialist, with a valuable know-how in most of IT security fields such as network, application and system security; information security assessment; penetration testing; open source technologies; developing security procedures, policies and guidelines; incident handling; computer forensics; security training and information security management, ISO 27001, ISO 27002, ISO 27005, information security in the banking industry, PCI-DSS. The experience covered also management aspects by managing and coaching technical teams.
SMII Mondher, a Cyber Security Analyst, at the National Agency for Computer Security NACS / Tunisian CERT, with expertise in threat analysis and intrusion detection systems. Performed dynamic analysis of malware and its delivery mechanism (malicious documents e.g. pdf, doc, etc.). Utilized custom sandbox environments such as Joe Sandbox, ANY.RUN and Hybrid Analysis to isolate malware and identifying malware C2 communication channels. Used MISP (Malware information sharing platform) to track, correlate and share the collected IOC's.
I am in charge of Information Sharing and Analysis Center ISAC.
I hold a professional master’s degree in Cyber Security and I am also certified ISO 27001 and ISO 22301.
