SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

This workshop is for OSINT practitioners who want to learn practical ways to integrate local Large Language Models (LLMs) into their workflows. Delegates will learn about the advantages of local LLMs for privacy and setup considerations before looking at how to self-host translation and other services, using retrieval augmented generation (RAG) to conduct analysis large data collections, and using agents to perform tasks like search.
Every analyst gets it wrong sometimes. The question is whether you get it wrong because of sloppy thinking or despite rigorous thinking. The difference is structure.
This hands-on workshop walks participants through a set of proven analytical frameworks designed to reduce the most common mistakes OSINT analysts make: confirmation bias, source fixation, premature closure, mirror imaging, and the failure to consider competing hypotheses. These are not theoretical lectures; each framework is paired with a practical exercise using realistic scenario materials, so participants leave with methods they can apply on Monday morning.
Open source investigators get easily distracted by tools, tech, and information overload. This workshop goes back to basics and will focus on practical skills and techniques to plan and conduct internet investigations effectively from start to finish. Delegates will learn how plan their research, how to prioritise their enquiries, how they can best deal with bias, and how to plan and manage long running investigations.
AI is now embedded across modern OSINT workflows, but the challenge for analysts is knowing where it genuinely adds value and how to integrate it without compromising accuracy or tradecraft. This streamlined workshop introduces practical, achievable ways to use AI within the OSINT Intelligence Cycle, specifically collection, processing, and analysis, while giving participants a short, focused lab to try these methods on realistic data.
‘Oooh… what have I done? I clicked it, and made a huge mistake.’ We’ve all been there, one small moment that turns into that unforgettable mistake. In her opening keynote, Lisette will take you behind the scenes, guiding you through some of her biggest missteps and the unexpected lessons they taught her. Through candid stories and honest reflection, she will explore how failure can fuel growth, how resilience is built in the toughest moments, and how self-awareness often emerges when things don’t go to plan. What steps did she take to strengthen critical thinking under pressure? What are the practical takeaways when navigating uncertainty? What can you learn from these investigative missteps?
Lisette Abercrombie, Operational Specialist (Inspector), Digital Expertise (OSINT) - Netherlands Police
Insider threats remain one of the most complex risks for organisations to detect and investigate. While many insider threat programs rely heavily on internal telemetry, user behaviour analytics, and monitoring tools, important indicators often exist outside corporate networks in publicly available sources.
Ritu Gill, OSINT Specialist – Okta
Ukraine’s Children of War database lists over 20,000 minors illegally displaced by Russia, not children found, but those missing. To date, no automated effort has linked these records with leaked Russian data or open sources.
Oleksii Nabozhniak, OSINT Specialist – IDLO Ukraine
Anastasiia Morozova, OSINT Consultant & Investigative Journalist - IDLO Ukraine
How can open‑source investigations keep pace in a world where information moves faster than human analysts can process it?
Roelof Temmingh , Managing Director – Vortimo
Alessandro Montalto, Software Engineer - Vortimo
Russia is increasingly isolating its state-controlled internet network (RuNet) from the rest of the global web.
Vytenis Benetis, Consultant - i-intelligence GmbH
In 2020, an online hate group quietly took shape. Over time, their campaigns grew more coordinated and more vicious. By 2023, they had focused their attention on a single innocent individual.
Richard Van U, OSINT Investigator – Netherlands Police
The OSINT landscape is shifting faster than ever. Data is exploding, platforms are closing, AI is rewriting the rules, yet real intelligence remains as rare and valuable as ever.