CRESTCon 2019 programme and presentation resources

Explore the advertised 2019 programme and the presentation resources that can still be checked. The tables identify the sessions; the resource directory distinguishes an original author record, a code repository, a related deck and material that remains missing.

Independent archive: this page is published by Serallo Domains Ltd, without affiliation to CREST or the speakers. It is a new reference article, not a recovered official webpage or a claim that we attended the event. For current conferences, visit CREST's event information.

Event and evidence

CRESTCon 2019 was advertised for 14 March 2019 at the Royal College of Physicians, London. The January bulletin points directly to this historical address, /presentations-2019/, for three streams: penetration testing, incident response and threat intelligence, and training.

The detailed programme special issue is labelled February 2019 on its cover, although its filename begins 2019-03. This is the programme source used for the tables.

The May follow-up bulletin confirms that the event took place and specifically mentions Paul Midian, Sarka Pekarova, Rewanth Cool and Lesley Kipling. We still label the running order as scheduled, because a retrospective mention of some talks does not verify the exact delivery of every programme item.

Programme and materials

Times below reproduce the advertised running order. Subject labels are deliberately short paraphrases; consult the organiser's linked programme for the full titles and abstracts. A row is a programme record, not a promise that slides or a recording are available.

Shared opening

Penetration testing

Incident response and threat intelligence

Training

Surviving resource directory

These resources were checked on 2 November 2026. They are linked externally so readers can inspect their provenance. We have not described a generic landing page as a working slide download.

For all other sessions in the tables, this archive currently provides a programme record. We have not authenticated an individual slide download or recording for each. That is a limit of this collection, not a statement that no material survives elsewhere.

Rewanth's browser-extension research

The author page and linked repository describe an extension that examines browser traffic for header-related security issues. The author record uses Rewanth Tammana, while the conference programme uses Rewanth Cool. We retain the programme's name in its table and link the author's own record for context.

There is a date discrepancy worth preserving: the author page displays 1 March 2019, whereas the organiser advertises 14 March. We use the organiser for the event date. The author's old slide link redirects to generic CREST content, so it is not listed here as an available PDF.

For a research note, distinguish the existence of code from evidence of effectiveness. A public repository lets you examine an implementation; it does not establish the accuracy of every result or current compatibility. Record the version or commit you actually review and test only in an environment you are authorised to assess.

Sheepl and exercise realism

The Sheepl repository describes creating simulated user activity in lab environments. The related OWASP slide deck identifies Matt Lorentzen and April 2019 on its opening pages. Its different event and date are why we label it as related material.

A useful question for your own exercise is: what ordinary activity would make the scenario harder to interpret? In a fictional exercise, one alert might coincide with a routine software rollout, a delayed log feed and an employee travelling. A facilitator can provide those facts as discussion prompts without operating an attack or adopting an old tool. Our tabletop-exercise guide and exercise planner explain that separate, newly written activity.

If you followed the digital-brochure link

The original file was published at /wp-content/uploads/2019/03/DigitalCRESTConbrochure2019.pdf. The May 2019 bulletin directed readers there for presentation material and pointed to CREST's YouTube channel for interviews and selected talks.

The original digital brochure has not been recovered for this archive. Its old address leads to the programme-and-materials section on this page. That section replaces the useful directory function; it is not the original brochure and does not contain every original slide link. We do not infer that every historical recording is still available merely because the channel exists.

Current guidance connected to the subjects

The following suggestions are our own editorial reading routes. The historical speakers did not write or endorse these guides.

For a worked reading exercise, choose one available resource, write its central claim in a sentence, and add the evidence you can directly inspect. Then record one limitation and one action that follows from your own analysis. If the only evidence is a programme abstract, label it that way. Do not write that you watched a presentation or reproduced a result unless you actually did so.

Use the conference-learning notes for that exercise. For the publication's source standards, unresolved document records and corrections route, see the archive source register and editorial policy.