# Event Details - **Event Name**: CRESTCon UK Community Event: Incident Response & Security Operations Centre - **Event Start and End Date**: Wed, 14 Oct, 2026 at 09:00 am – Wed, 14 Oct, 2026 at 05:00 pm (+01:00) - **Event Description**: Join CRESTCon UK Incident Response(IR) and Security Operations Cent Community Day for a full day of insights, collaboration, and networking.About this EventHosted by CREST Focus Group chairs Benn Morris (IR) and Martin Riley (SOC), join us as we deep-dive into the topics of Incident Response & Security Operations Centre. Whether you are just beginning your career or are experienced in the field, this event will offer great insights and a chance to meet with peers from across the industry.Across the day we'll be featuring expert tech talks, networking opportunities, and fresh insights into the tools, techniques, and trends shaping the field.AI will feature throughout the day because it is already changing how cybersecurity teams work. Speakers will explore where AI is proving genuinely useful, where the risks and limitations lie, and what it means in practice for Incident Response, SOC and Penetration Testing teams.Full speaker line up now available!Who should attend?Whether you’re early in your cybersecurity career or an experienced professional, this event offers valuable insights into emerging trends and a great opportunity to connect with peers across the industry.AttendanceOpen to ALLEvent Details:Date: Wednesday 14 October 2026Time: 09:00 - 16:00Location: IET Birmingham: Austin Court, BirminghamAgenda🕑: 08:45 AMArrival and Registration🕑: 09:30 AMWelcome and Opening remarksHost: Boglarka Ronto🕑: 09:45 AMStrategic threat assessment, what shapes the incident & cyber threat landscapeHost: Charlie S Info: To discuss strategic threat assessment and which shapes the incident and cyber threat landscape. Discussing the big 4 themes that we see, the changes we’ve seen over the last 10 years, what is causing the bulk of incidents, and where we see AI having an impact🕑: 10:15 AMBecoming an NCSC Assured Cyber Incident Response Provider Host: Keith CottendenInfo: Becoming an NCSC Assured Cyber Incident Response Provider – What Does It Really Take? CIR Standard and assessment process, what organisations need to demonstrate, the types of evidence and capabilities assessors are looking for, and some of the common challenges organisations encounter when preparing for assessment. Looking at the importance of demonstrating a mature and repeatable incident response capability rather than simply having the necessary documentation in place, including areas such as governance, technical capability, operational delivery, personnel, case management and continuous improvement. 🕑: 10:45 AMBREAK🕑: 11:15 AMAhead of the Alert!Host: Christos KatagisInfo: Ahead of the Alert: C2 Infrastructure Mapping and High-Confidence Attribution of the Kali365 Operator A deep dive into the Kali365 phishing platform, revealing how investigators uncovered its infrastructure, tracked its operations, and attributed the service to its operator through technical analysis and OSINT.🕑: 11:00 AMWho did it? The Realities of Incident Response and AttributionHost: Jamie RoderickInfo: Incident Response is challenging, the tempo of events can force priorities on to the investigators. Customers can obsess on attribution (or go the other way and just rebuild). This talk is a canter over some of the challenges that investigators face when looking to attribute during an incident🕑: 12:15 PMLUNCH AND NETWORKING🕑: 01:15 PMLeveraging Android Intrusion logging for CERT InvestigationsHost: Stephen Fisher-DaviesInfo: In this talk I discuss the most recent Android advanced android protection mechanism Intrusion logging and how you can use device base lining to detect APT intrusions inside these logs🕑: 01:45 PMHow much SOC do you really need?Host: Callum BarnesInfo: How much SOC do you really need - the story of three organisations, three very different answers. This session challenges the idea that there is a single "best" SOC model, exploring how security operations should be tailored to an organisation's maturity, capabilities and risk appetite. Through real-world examples, it introduces a practical framework based on ownership of visibility, containment and continuous improvement, helping organisations determine the right balance between capability, cost and risk.🕑: 02:15 PMYour EDR Saw It. Your SOC Didn'tHost: Kristen KadachInfo: Your EDR Saw It. Your SOC Didn't: Hunting the Detection Gaps Between Telemetry and Alerts This session explores the gap between the telemetry collected by EDR platforms and the alerts actually surfaced to security teams. Using a real-world malware investigation, it demonstrates how endpoint data can reveal malicious activity that goes undetected by default alerts, and how SOC and detection engineering teams can use KQL and behavioural analytics to identify detection gaps and improve threat visibility.🕑: 02:45 PMBREAK🕑: 03:00 PMBeyond the playbook; What it really takes to Excel as an Incident ResponderInfo: Beyond the playbook; What it really takes to Excel as an Incident Responder Technical tool knowledge isn't enough in incident response. This talk reveals what separates exceptional responders from the rest: understanding the 'why' behind forensic evidence and mastering the soft skills that matter when executives are panicking. Discover the skills that truly count when organisations face their worst moments🕑: 03:30 PMOpen floor - questions and discussionHost: Boglarka Ronto🕑: 04:00 PMCLOSE - **Event URL**: https://allevents.in/birmingham/crestcon-uk-community-event-incident-response-and-security-operations-centre/100001997690188129 - **Event Categories**: fitness - **Interested Audience**: - total_interested_count: 0 - **Event Highlights**: - Duration: 8 hours - Location: IET Birmingham: Austin Court - Languages: English ## Ticket Details - **Ticket Price Range**: min: 16.96, max: 16.96, currency: GBP ## Event venue details - **city**: Birmingham - **state**: EN - **country**: United Kingdom - **location**: IET Birmingham: Austin Court - **lat**: 52.4797363 - **long**: -1.913225 - **full address**: IET Birmingham: Austin Court, 80 Cambridge Street, Birmingham, United Kingdom ## Event gallery - **Alt text**: CRESTCon UK Community Event: Incident Response & Security Operations Centre - **Image URL**: https://cdn-az.allevents.in/events7/banners/472e03b1e1e8aad8c87c6497b3faf753c1f9fe086917d32249a26a8d264b51fa-rimg-w1200-h600-dc081848-gmir.jpg?v=1786861371 ## FAQs - **Q**: When and where is CRESTCon UK Community Event: Incident Response & Security Operations Centre being held? - **A:** CRESTCon UK Community Event: Incident Response & Security Operations Centre takes place on Wed, 14 Oct, 2026 at 09:00 am to Wed, 14 Oct, 2026 at 05:00 pm at IET Birmingham: Austin Court, 80 Cambridge Street, Birmingham, United Kingdom. - **Q**: Who is organizing CRESTCon UK Community Event: Incident Response & Security Operations Centre? - **A:** CRESTCon UK Community Event: Incident Response & Security Operations Centre is organized by CREST International. ## Structured Data (JSON-LD) ```json [ { "@context": "https://schema.org", "@type": "Event", "name": "CRESTCon UK Community Event: Incident Response & Security Operations Centre", "image": "https://cdn-az.allevents.in/events7/banners/472e03b1e1e8aad8c87c6497b3faf753c1f9fe086917d32249a26a8d264b51fa-rimg-w1200-h600-dc081848-gmir.jpg?v=1786861371", "startDate": "2026-10-14T09:00:00+01:00", "endDate": "2026-10-14T17:00:00+01:00", "url": "https://allevents.in/birmingham/crestcon-uk-community-event-incident-response-and-security-operations-centre/100001997690188129", "eventStatus": "https://schema.org/EventScheduled", "location": { "@type": "Place", "name": "IET Birmingham: Austin Court", "address": { "@type": "PostalAddress", "streetAddress": "80 Cambridge Street", "postalCode": "B1 2NP", "addressLocality": "Birmingham", "addressRegion": "EN", "addressCountry": "GB" }, "geo": { "@type": "GeoCoordinates", "latitude": "52.4797363", "longitude": "-1.913225" } }, "eventAttendanceMode": "https://schema.org/OfflineEventAttendanceMode", "description": "Join CRESTCon UK Incident Response(IR) and Security Operations Cent Community Day for a full day of insights, collaboration, and networking.", "offers": [ { "@type": "AggregateOffer", "availability": "https://schema.org/InStock", "priceCurrency": "GBP", "availabilityStarts": "2026-08-16", "availabilityEnds": "2026-10-14T17:00:00+01:00", "validFrom": "2026-08-16", "lowPrice": "16.96", "highPrice": "16.96", "price": "16.96", "url": "https://allevents.in/birmingham/crestcon-uk-community-event-incident-response-and-security-operations-centre/100001997690188129" }, { "@type": "Offer", "availability": "https://schema.org/InStock", "priceCurrency": "GBP", "availabilityStarts": "2026-08-16", "availabilityEnds": "", "validFrom": "2026-08-16", "url": "https://allevents.in/birmingham/crestcon-uk-community-event-incident-response-and-security-operations-centre/100001997690188129", "price": "16.96", "name": "IR/SOC Day Only" } ], "organizer": [ { "@type": "Organization", "name": "CREST International", "url": "https://allevents.in/org/crest-international/23522228", "description": "CREST is the international not-for-profit accreditation and certification body that represents and supports the technical information security market. CREST provides internationally recognised accreditations for organisations and professional level certifications for individuals providing vulnerability assessment, penetration testing, cyber incident response, threat intelligence services, and Security Operations Centre (SOC) services." } ] } ] ```