08:30-09:00 - Registration / coffee & tea

09:00-09:10 - Welcome / conference opening by Dennis Broeders & Monica Kaminska

09:10-09:50 - Keynote by Hester Somsen

09:50-10:10 - A Sliver of Light: Perspective Bias in Talking About Cyber Operations, Daniel Moore

10:10-10:30 - A Year in the Life: An Iranian Group's Road To Fame, Saher Naumaan

10:30-10:50 - Pirates, privateers, and mercantile companies in cybersecurity, Florian Egloff

10:50-11:15 - Q&A sessions with Daniel Moore, Saher Naumaan and Florian Egloff

11:15-11:30 - Coffee break

11:30-11:50 - Investigating links between Iranian hacktivists and nation state groups – a concrete example, Rhianna King

11:50-12:10 - Operationally‐Informed Cyber Policy, Jamie Collier

12:10-12:30 - Turla, the FSB, and threat intelligence, Hakan Tanriverdi

12:30-12:55 - Q&A sessions with Rhianna King, Jamie Collier and Hakan Tanriverdi

12:55-14:00 - Lunch break

14:00-14:40 - Keynote by Inge Bryan

14:40-15:00 - Privatized APT capabilities: history, motivations, and strategy (or lack thereof), Winnona DeSombre

15:00-15:20 - How do state-sponsored espionage operations impact NGOs?, Alexander Martin

15:20-15:40 - Is Latin America the Lost Continent of Cyberspace?, Eduardo Izycki

15:40-16:05 - Q&A sessions with Winnona DeSombre, Alexander Martin and Eduardo Izycki

16:05-16:20 - Afternoon break

16:20-16:40 - Bridging the gap between Civil Society and Private Sector Threat Intel, by Ben Read

16:40-17:00 - From MBR to Social - Iranian disruptive evolution, by Sanaz Yashar

17:00-17:20 - In Lieu of Cyberwar – Operations in the Russian Invasion of Ukraine, by Juan Andrés Guerrero-Saade

17:20-17:40 - Presentation by an analyst at the Defence Intelligence and Security Service of the Netherlands (MIVD) – No photo or video, TLP:AMBER

17:40-17:50 - Closing words

17:50-18:15 - Q&A sessions with Ben Read, Sanaz Yashar and Juan Andrés Guerrero-Saade

18:15-19:30 - Closing drinks