Threat Hunting - Defining the Process While Circumventing Corporate Obstacles

Threat Hunting - Defining the Process While Circumventing Corporate Obstacles

Learn about effective threat hunting techniques and overcoming organizational challenges in this 47-minute conference talk from BSidesPhilly 2017. Explore the fundamentals of threat hunting, including activity tracking, success measurement, and hypothesis-driven methodology. Discover practical approaches to data collection through network hunting, PowerShell remoting, and Windows event forwarding. Delve into data analysis using ELQ and Hive, focusing on identifying normal patterns and anomalies. Gain insights on accountability, measurements, and addressing common obstacles in implementing a robust threat hunting process within corporate environments.