Uploaded August 2026 | Updated September 2026, 3 hours ago
Brian DeWyngaert (CISA, US)
Threat intelligence is only as valuable as an analyst’s ability to translate human insight into machine‑readable data — yet most indicators still circulate in ad‑hoc emails and chat threads, bypassing STIX/TAXII pipelines and slowing collective defense.
This session unveils CISA’s Indicator Message eXchange (IMX), a newly open‑sourced, containerized platform that lets experts publish high‑fidelity STIX 2.x packages in minutes — no schema expertise required. Attendees will see live demos of IMX’s dual interface: a Guided Mode that walks any analyst through five intuitive questions (Who, What, Where, How, Why) and an Expert Mode with real‑time validation and enrichment hooks.
---
Brian John DeWyngaert Jr. is the Senior Technical Advisor for Threat Hunting at the Cybersecurity and Infrastructure Security Agency (CISA), bringing over 20 years of experience across the U.S. Military, U.S. Federal Executive, and private sectors. A strategic thought leader for CISA since 2009, Brian has held pivotal leadership roles including leading coordinated defensive operations for CISA and Deputy Officer in Charge for a U.S. Military Operations Team. His expertise lies in bridging the gap between executive strategy and technical engineering.
Brian DeWyngaert (CISA, US)
Threat intelligence is only as valuable as an analyst’s ability to translate human insight into machine‑readable data — yet most indicators still circulate in ad‑hoc emails and chat threads, bypassing STIX/TAXII pipelines and slowing collective defense.
This session unveils CISA’s Indicator Message eXchange (IMX), a newly open‑sourced, containerized platform that lets experts publish high‑fidelity STIX 2.x packages in minutes — no schema expertise required. Attendees will see live demos of IMX’s dual interface: a Guided Mode that walks any analyst through five intuitive questions (Who, What, Where, How, Why) and an Expert Mode with real‑time validation and enrichment hooks.
---
Brian John DeWyngaert Jr. is the Senior Technical Advisor for Threat Hunting at the Cybersecurity and Infrastructure Security Agency (CISA), bringing over 20 years of experience across the U.S. Military, U.S. Federal Executive, and private sectors. A strategic thought leader for CISA since 2009, Brian has held pivotal leadership roles including leading coordinated defensive operations for CISA and Deputy Officer in Charge for a U.S. Military Operations Team. His expertise lies in bridging the gap between executive strategy and technical engineering.
