The Human Centered Investigation Playbook (HCIP) standard is a YAML-based syntax for writing investigation playbooks that correspond to a particular alert, artifact, or attack. The goal is to have an investigation methodology that both guides the analyst and also integrates into defensive tooling to make necessary data easily available during the investigation. I will discuss the standard, explore its purpose and use cases, and demonstrate its functionality in a free and open monitoring platform
Matthew Gracie is a defensive security specialist with fifteen years of Blue Team experience in higher education, manufacturing, financial services, and healthcare. He is currently a Senior Engineer at Security Onion Solutions, as well as the interim director of the Cybersecurity... Read More →
Saturday September 12, 2026 10:30am - 10:55am CDT Swissôtel Chicago323 E Wacker Dr, Chicago, IL 60601, USA
