Thursday, April 10, 2025, 9 A.M. – 2.40 P.M.
IT Security Day
Bucharest
Industry Insights From The Frontline
Customer Event with Microsoft Security Partners
Microsoft Romania Office, Bulevardul Iuliu Maniu. 6P Clădirea Campus, București 061103
Registration
Image gallery
About the event
With the support of Microsoft, White Hat IT Security organizes an exclusive, managed security-focused event for medium and large enterprise business and technical decision makers - CEOs, CISOs, DPOs, CTOs, IT security managers, IT and Security Administrators, Security Experts and SOC Analysts. The language of the event is English.
We encourage everyone to attend who
wants to stay up to date with current cybersecurity challenges in the energy industry, e-commerce, healthcare, and other critical infrastructures.
wants to hear about real cyber incidents and how to resolve them from one of the region’s most experienced incident response teams.
would like to gain insight into the operation of a Microsoft-based Security Operations Center.
is eager to see how a cyberattack unfolds and how to defend against it using Microsoft Security tools.
Program
08.00 – 09.00
Registration, breakfast
09.00 – 09.15
Welcome, introduction
09.15 – 10.00
From Intelligence to Action: Proactive Cyber Crisis Management in a Rapidly Evolving Threat Landscape
In today’s volatile cyber landscape, waiting for an attack to happen is no longer an option. Organizations must shift from reactive defense to proactive cyber crisis management, leveraging Cyber Threat Intelligence (CTI) to anticipate, prevent, and mitigate emerging threats. This session explores how to transform raw threat data into actionable insights, strengthen incident preparedness, and build resilient response strategies. Attendees will gain practical approaches to integrating CTI into crisis management frameworks, enabling faster decision-making and reducing the impact of cyber incidents before they escalate.
10.00 – 10.40
Let’s Learn From Others’ Mistakes – Incident Response Case Studies
Sándor has 20+ years of incident response experience, 15 of which were spent in national security. As a result, he has gained extensive expertise and has encountered nearly every type of cyberattack.
For this event, he has compiled a selection of incident cases from the past 2–3 years, where the White Hat CSIRT team played an active role in mitigating attacks, restoring business continuity, and, when necessary, uncovering the causes and methods of the incidents.
His presentation, titled “Let’s Learn from Others’ Mistakes”, emphasizes that preventing cyberattacks is always more cost-effective than responding to incidents after they occur. While this may seem obvious, many companies still lack even the most basic information security protections.
10.40 – 11.00
Coffee break
11.00 – 11.40
The Evolving Threat Landscape – Hear about the threats in the cyberspace from Microsoft Incident Response Teams directly
In the last year, the cyber threat landscape continued to become more dangerous and complex. The malign actors of the world are becoming better resourced and better prepared, with increasingly sophisticated tactics, techniques, and tools that challenge even the world’s best cybersecurity defenders.
Even Microsoft has been the victim of well-orchestrated attacks by determined and well-resourced adversaries, and our customers face more than 600 million cybercriminal and nation-state attacks every day, ranging from ransomware to phishing to identity attacks.
Microsoft’s unique, expansive, and global vantage point gives us unprecedented insight into key trends in cybersecurity affecting everyone from individuals to nations. The spectrum of security signals we see is further enhanced by the diversity of our customers and partners, including governments, enterprises large and small, consumers, and gamers.
Gábor Győri, Director, CSS Cybersecurity Incident Response Team, Microsoft
11.40 – 12.20
Affordable Managed Security Operations Center
Preventive defense is always more cost-effective than dealing with an attack. But what are the actual numbers?
Our colleagues will break down the key components of an effective SOC. These are not just specific cost items or staffing figures, but also factors that reflect the complexity of SOC operations and determine its quality.
Outsourcing your company’s information security to an external provider is a matter of trust, but we will highlight the many advantages of doing so. The presentation will also showcase how Microsoft Security tools are structured to protect organizations and how White Hat ensures the security of its clients.
János Pallagi, Defense Lead, White Hat IT Security
Ágoston Ménesi, Cybersecurity Sales Consultant, White Hat IT Security
12.20 – 13.20
Lunch break
13.20 – 14.00
End to end protection for cloud, hybrid and on-premises infrastructures with Microsoft 365 Defender XDR & Defender for Cloud
Microsoft Defender XDR can automatically disrupt advanced cyberattacks at machine speed, reducing the workload on security operations centers (SOCs) and enabling rapid response.
This session will explain to you in a LIVE DEMO main advantages of using Microsoft XDR infused with Artificial Intelligence knowledge:
- stopping lateral movement of advanced cyberattacks, such as ransomware and business email compromise, with advanced AI capabilities that automatically isolate compromised devices and user accounts,
- remediating cyberthreats efficiently with a complete view of the cyberattack chain informed by 78 trillion daily signals and prioritized investigation and response at the incident level,
- respond to cyberthreats faster with step-by-step guidance, empower any analyst to build queries in natural language, and reverse-engineer adversarial scripts in seconds.
Defender for Cloud is Microsoft Cloud Native Application Protection Platform that simplifies securing cloud applications throughout their lifecycle.
This session will explain to you in a LIVE DEMO main advantages of Defender for Cloud platform.
Ovidiu Pismac, Senior Security Cloud Solution Architect, Microsoft
14.00 – 14.40
Attack & Defense Demo by Ethical Hackers and SOC Analysts of White Hat IT Security
Let’s take a look behind the scenes!
White Hat’s ethical hackers and SOC analysts are preparing a special demonstration for the afternoon session — an absolute treat for those interested in the technological processes running in the background.
We will simulate a pre-planned attack, which will be detected and handled live on-site by our Defense Lead. During this process, he will provide a detailed explanation of when and how each Microsoft Security tool comes into play and what its role is in the defense process.
Bio
About the speakers
George Dobrea
Co-founder and CEO of XEDUCO Institute, George Dobrea is a cybersecurity expert and a well-known technical instructor with more than 35 years of business experience providing consulting and training services to military, commercial, and public organizations in 30+ countries. He has been awarded fifteen times by Microsoft as an MVP for Security and six times by EC-Council as “Instructor of the Year”.
Sándor Fehér
Sándor is the founder and CEO of White Hat IT Security, with over 20 years of experience in cybersecurity. Previously, he spent 15 years in the Hungarian and European national security sector. He holds degrees in Computer Engineering and Software Engineering Mathematics.
He is a Certified Information Security Manager (CISM) and an ISO/IEC 27001 Lead Auditor, as well as the holder of several other international cybersecurity certifications, including OSCP, OSCE, and OSWP.
Sándor is an elected member of the Cybersecurity Advisors Network (CyAN), a founding member of the Hungarian Cybersecurity Cluster, and a board member of the Paris-based Good Faith Cybersecurity Researcher Coalition.
He regularly shares his expertise with the IT security community at various industry events.
Ovidiu Pismac
Since 2006 in Microsoft, Ovidiu is trusted advisor for biggest Microsoft partners in Central Europe & Microsoft Romania customers. He is Senior Security Cloud Solution Architect in Partner Solutions Architects team at Central Europe regional level.
Ovidiu is passionate on multiple aspects of Microsoft management and security platforms:
- Threat Protection with focus on Microsoft Defender XDR and entire Defender Stack- Defender for Endpoint, Defender for Identity, Defender for Cloud Apps, Defender for Office 365, Defender for IoT, Defender for Cloud, Microsoft Sentinel) on various operating systems: Windows, Linux, Mac OS X.
- Cloud Security with focus on Defender for Cloud, CNAPP, CSPM and hybrid management platform (Azure Arc for Windows and Linux servers)
- Data Protection and compliance with focus on Purview Information Protection, Data Loss Prevention and Insider Risk Management, compliance and regulations with focus on NIS2 & DORA.
- AI Security with focus on AI Security Posture Management, Purview Data Security Posture Management and Security Copilot for AI management platforms for cloud or hybrid
- Heterogeneous infrastructure management with focus on Intune, System Center for Windows, Linux, Mac OSX systems
- Threat Intelligence platforms with focus on Microsoft Threat Intelligence and External Attack Surface Management
Over the past 26 years Ovidiu has also worked as an IT department manager at the National Bank of Romania – Giurgiu branch; System Engineer at GeCAD – working directly with Microsoft’s current antivirus solution and Security Engineer at UTI Systems – specialized in Security and PKI solutions.
János Pallagi
János has 10+ years of cybersecurity experience, including malware analysis, incident response, forensics investigations. At White Hat, he is one of the experts on Microsoft Security. He worked as SOC analyst and he has been leading the managed SOC team since 2022.
About the organizer
White Hat IT Security
White Hat IT Security is a European based Managed Security Services Provider (MSSP) and a Microsoft Solution Partner with Advanced Threat Protection specialization. Its managed security solutions are verified by Microsoft, proofing the high-level of expertise. Additionally, White Hat has the largest incident response capacity in the CEE region.
