[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"detail-sidebar-cat-0-en-105":3,"doc-seo-292400-105":59,"doc-detail-292400-en":130},{"code":4,"msg":5,"data":6},0,"success",[7,13,18,23,28,33,38,43,48,51,55],{"id":8,"doc_module":4,"doc_module_name":9,"category_name":10,"show_sort_weight":11,"slug":12},1,"Document","Story & Novel",90,"story-novel",{"id":14,"doc_module":4,"doc_module_name":9,"category_name":15,"show_sort_weight":16,"slug":17},2,"Literature",80,"literature",{"id":19,"doc_module":4,"doc_module_name":9,"category_name":20,"show_sort_weight":21,"slug":22},4,"Exam",70,"exam",{"id":24,"doc_module":4,"doc_module_name":9,"category_name":25,"show_sort_weight":26,"slug":27},5,"Comic",60,"comic",{"id":29,"doc_module":4,"doc_module_name":9,"category_name":30,"show_sort_weight":31,"slug":32},6,"Technology",50,"technology",{"id":34,"doc_module":4,"doc_module_name":9,"category_name":35,"show_sort_weight":36,"slug":37},7,"Healthcare",40,"healthcare",{"id":39,"doc_module":4,"doc_module_name":9,"category_name":40,"show_sort_weight":41,"slug":42},8,"Research & Report",30,"research-report",{"id":44,"doc_module":4,"doc_module_name":9,"category_name":45,"show_sort_weight":46,"slug":47},9,"Religion & Spirituality",20,"religion-spirituality",{"id":46,"doc_module":4,"doc_module_name":9,"category_name":49,"show_sort_weight":46,"slug":50},"World Cup","world-cup",{"id":52,"doc_module":4,"doc_module_name":9,"category_name":53,"show_sort_weight":52,"slug":54},10,"Lifestyle","lifestyle",{"id":56,"doc_module":4,"doc_module_name":9,"category_name":57,"show_sort_weight":24,"slug":58},19,"General","general",{"code":4,"msg":60,"data":61},"ok",{"site_id":62,"language":63,"slug":64,"title":65,"keywords":66,"description":67,"schema_data":68,"social_meta":123,"head_meta":125,"extra_data":127,"updated_unix":129},105,"en","suricon-amsterdam2019-certitude-an-open-source-and-agentless-compromise-assessment-tool-who-are-we-why-are-we-here-and-the-needs-behind-the-tool","SURICON AMSTERDAM2019 - CERTitude: An open-source and agentless compromise assessment tool - Who are we, Why are we here, and the needs behind the tool","","SURICON AMSTERDAM2019 introduces CERT-W personnel and their internal organization within cybersecurity and digital trust. It explains the historical role of the Open Information Security Foundation (OISF) and how ANSSI support led to CERTitude being presented as a candidate for sponsorship. The document details why CERTitude was built: fast compromise assessment of workstations and servers, compliance-driven IOC search for French companies, and support for REC assignments. It also highlights infosec incentives and a brief chronology of tool development from Scanopy to a rework starting in 2019, ending with an assignment workflow toward identifying IOC.",{"@graph":69,"@context":122},[70,84,105],{"@type":71,"itemListElement":72},"BreadcrumbList",[73,77,79,82],{"item":74,"name":75,"@type":76,"position":8},"https://docshare.wps.com","Home","ListItem",{"item":78,"name":9,"@type":76,"position":14},"https://docshare.wps.com/document/",{"item":80,"name":30,"@type":76,"position":81},"https://docshare.wps.com/document/technology/",3,{"item":83,"name":65,"@type":76,"position":19},"https://docshare.wps.com/document/suricon-amsterdam2019-certitude-an-open-source-and-agentless-compromise-assessment-tool-who-are-we-why-are-we-here-and-the-needs-behind-the-tool/292400/",{"url":83,"name":65,"@type":85,"image":86,"author":91,"headline":65,"publisher":94,"fileFormat":97,"inLanguage":63,"description":67,"dateModified":98,"datePublished":99,"encodingFormat":97,"isAccessibleForFree":100,"interactionStatistic":101},"DigitalDocument",{"url":87,"@type":88,"width":89,"height":90},"https://docshare.wps.com/thumbnails/suricon-amsterdam2019-certitude-an-open-source-and-agentless-compromise-assessment-tool-who-are-we-why-are-we-here-and-the-needs-behind-the-tool/292400.png","ImageObject",300,407,{"name":92,"@type":93},"Blitz","Person",{"url":74,"name":95,"@type":96},"DocShare","Organization","application/pdf","2026-10-20","2026-09-17",true,{"@type":102,"interactionType":103,"userInteractionCount":24},"InteractionCounter",{"@type":104},"ViewAction",{"@type":106,"mainEntity":107},"FAQPage",[108,114,118],{"name":109,"@type":110,"acceptedAnswer":111},"Who are the key people introduced in the document?","Question",{"text":112,"@type":113},"Jean Marsault (CERT-W Head of R&D) and Vincent Nguyen (Head of the CERT-W) are introduced along with brief background and interests.","Answer",{"name":115,"@type":110,"acceptedAnswer":116},"Why was CERTitude developed according to the document?",{"text":117,"@type":113},"It was built to quickly assess compromised workstations and servers and to support compliance needs such as IOC search campaigns using ANSSI-provided indicators, including REC assignments.",{"name":119,"@type":110,"acceptedAnswer":120},"How is CERTitude connected to OISF and ANSSI?",{"text":121,"@type":113},"OISF was historically formed around the Suricata project, ANSSI joined as a gold member, and in 2019 (with ANSSI coordination) Wavestone presented CERTitude as a candidate to be sponsored by OISF.","https://schema.org",{"og:url":83,"og:type":124,"og:title":65,"og:site_name":95,"og:description":67},"article",{"robots":126,"canonical":83},"index,follow",{"doc_id":128,"site_id":62},292400,1790768390,{"code":4,"msg":5,"data":131},{"doc_id":128,"user_id":132,"nickname":92,"user_avatar":133,"doc_module":4,"category_id":29,"category_name":30,"doc_title":65,"doc_description":67,"doc_content":134,"file_id":135,"file_url":136,"file_type":137,"file_size":138,"view_count":24,"is_deleted":4,"is_public":8,"is_downloadable":8,"audit_status":8,"page_count":139,"language":140,"language_code":63,"site_id":62,"html_lang":63,"table_of_contents":141,"faqs":142,"seo_title":143,"seo_description":67,"update_tm":144,"read_time":145},24464137899374,"https://us-avatar.wpscdn.com/davatar_3d24733baf745e90a7e4bdd5f77d97b2","SURICON审角AMSTERDAM2019@ERTITUDEAn open-source and agentless compromiseassessment tool@iansus |@nguvinIVAVESTONE  \n# $whoarewe\n\nJean MARSAULT  \nCERT-W-Head of R&D  \n@iansus  \n》 Original dev of CERTitude  \n》Player for YoloSw4g CTF  \n》Likes penetration tests andDFIR  \n》Also likes beer-any  \nsuggestion in Amsterdam?  \nVincent NGUYEN  \nHead of the CERT-W  \n@nguvin  \n》I'm Batman(shhht)  \nSURICON  \nAMSTERDAM2019  \n# VAVESTONE\n\nInternal organization  \n》 Split into 18 business and technological practices》 Working in the Cybersecurity and Digital Trust practice》 Attached to the \\#Pool-Audit and CERT-W teams  \nOur activities  \n》 Security audits and penetration tests  \n》 Digital forensics,Incident response and Cyber crises  \n》Research &Development(5+ongoing projects)  \n# $whyarewehere\n\nHistorically,the Open Information Security Foundation(OISF)was builtcirca 2010 around the Suricata IDS/IPS project to support and raisefunds for the tool's development.  \n1  \nOISF  \n$whyarewehere  \nHistorically,the Open Information Security Foundation(OISF)was builtcirca 2010 around the Suricata IDS/IPS project to support and raisefunds for the tool's development.  \n1  \nIn 2016,the National Cybersecurity Agency of France(ANSSI)joined theOISF as a gold member to highlight the wish to see France get involvedin worldwide open-source security projects.  \n2  \nOISF  \n$whyarewehere  \nHistorically,the Open Information Security Foundation(OISF)was builtcirca 2010 around the Suricata IDS/IPS project to support and raisefunds for the tool's development.  \n1  \nIn 2016,the National Cybersecurity Agency of France(ANSSI)joined theOISF as a gold member to highlight the wish to see France get involvedin worldwide open-source security projects.  \n2  \nIn 2019,in coordination with the ANSSI,Wavestone decided to presentits tool CERTitude as a candidate to be sponsored by the OISF  \n3  \n# CERTitude-the needs behind the tool\n\nBusiness needs  \n》 A field need:quickly assess which workstations and servers have been compromised  \n》 A compliance need:French companies should be able to perform search campaignswhen provided with indicators of compromise(IOC)from the ANSSI  \n》 Also stated in the PRIS qualification from the ANSSI that qualified investigationservices providers must be able to perform REC assignments(IOC search)  \n# CERTitude-the needs behind the tool\n\nBusiness needs  \n》 A field need:quickly assess which workstations and servers have been compromised  \n》 A compliance need:French companies should be able to perform search campaignswhen provided with indicators of compromise (IOC)from the ANSSI  \n》 Also stated in the PRIS qualification from the ANSSI that qualified investigationservices providers must be able to perform REC assignments(IOC search)  \n# Infosec incentives\n\n》 Be able to interact with the worldwide Threat Intelligence sphere:  \n》 Be a part of the global \"IOC sharing\"between private and state actors(MISP,Mitre ATT&CK,etc.)  \n》Know your enemy better:\"Supreme excellence consists of breaking the enemy's resistance withoutfighting”(Sun-Tzu)  \n# CERTitude-the needs behind the tool\n\nBusiness needs  \n》 A field need:quickly assess which workstations and servers have been compromised  \n》 A compliance need:French companies should be able to perform search campaignswhen provided with indicators of compromise (IOC)from the ANSSI  \n》 Also stated in the PRIS qualification from the ANSSI that qualified investigationservices providers must be able to perform REC assignments(IOC search)  \n# Infosec incentives\n\n》 Be able to interact with the worldwide Threat Intelligence sphere:  \nBe a part of the global \"IOC sharing\"between private and state actors(MISP,Mitre ATT&CK,etc.)  \nKnow your enemy better:\"Supreme excellence consists of breaking the enemy's resistance withoutfighting”(Sun-Tzu)  \nChronology  \n2013  \n》Scanopy,a first approach toautomating IOC tooling  \n2014/2015  \n》  First version of CERTitude,presented at the CORI&IN  \n2015 to 2017  \n》 First tests of the toolinternally and ","cbCaipZ2RVb34MJG","https://ap.wps.com/l/cbCaipZ2RVb34MJG","pdf",1050788,41,"English","# $whoarewe\n# VAVESTONE\n## Internal organization\n## Our activities\n# $whyarewehere\n# CERTitude-the needs behind the tool\n## Business needs\n# Infosec incentives\n# Chronology\n# A short story about digital forensics assignments","[{\"question\":\"Who are the key people introduced in the document?\",\"answer\":\"Jean Marsault (CERT-W Head of R\\u0026D) and Vincent Nguyen (Head of the CERT-W) are introduced along with brief background and interests.\"},{\"question\":\"Why was CERTitude developed according to the document?\",\"answer\":\"It was built to quickly assess compromised workstations and servers and to support compliance needs such as IOC search campaigns using ANSSI-provided indicators, including REC assignments.\"},{\"question\":\"How is CERTitude connected to OISF and ANSSI?\",\"answer\":\"OISF was historically formed around the Suricata project, ANSSI joined as a gold member, and in 2019 (with ANSSI coordination) Wavestone presented CERTitude as a candidate to be sponsored by OISF.\"}]","SURICON AMSTERDAM2019 - CERTitude: An open-source and agentless compromise assessment tool - Who are we, Why are we here, and the needs behind the tool | PDF",1789650987,103]