From OSINT to Detection: Building an Agentic CTI Pipeline (<– add to your schedule)
Modern threat intelligence moves fast, but detection engineering lags. This talk presents an agentic workflow that transforms OSINT into actionable detections using structured extraction, LLM reasoning, and automated validation. Transparent, auditable pipelines accelerate the CTI lifecycle, from ingestion to Sigma rules, while preserving analyst control, reducing time-to-detection from days to hours.
Andrew Skatoff:
Andrew Skatoff is a cybersecurity leader and practitioner with over 20 years of experience protecting critical financial infrastructure. His work spans incident response, threat hunting, and detection engineering.
He is the creator of Huntable CTI Studio, an open-source workbench that transforms threat intelligence into actionable detections through transparent, auditable AI workflows. His work focuses on applying AI to security while preserving rigor, trust, and analyst control.