Teymur Kheirkhabarov

Head of Cyber Threat Monitoring, Response and Research


topic name & Synopsis

Hunting for the most popular attack techniques relevant for the GCC region

The workshop will address the ways in which SOC can detect the most common attack techniques and tools relevant to the GCC region. In particular, which correlation rules can be developed to identify these techniques and tools, and which sources of events need to be plugged into the SIEM.


Teymur has been engaged in practical cybersecurity for over 15 years, including such areas as security operations, threat hunting, detection engineering, incident response and endpoint security. At BI.ZONE, he manages product portfolio, related to the security operations and endpoint security. Teymur oversees a team of more than 150 experts. During the past year, his team protected more than 150 companies, responded more than 100 critical cybersecurity incidents, and investigated the cyber threat landscape in Russia and CIS countries, MENA and other regions of the world. Previously, he was Head of SOC R&D at Kaspersky and CISO at an industrial enterprise, as well as a DevOps Engineer with many years of experience. He obtained a master’s degree from Siberian State Aerospace University.
Teymur is the author and coauthor of several cybersecurity trainings, including “Security Operations Center and Cyber Threat Hunting” and “Windows Security” at Harbour.Space university (Barcelona, Spain). He is a frequent speaker guest at various industry events. His speaking engagements include ZeroNights, PHDays, OFFZONE, and others. Teymur holds GCFA, GDSA and GXPN certifications.