The Hunter Games - How to Find the Adversary with Event Query Language

The Hunter Games - How to Find the Adversary with Event Query Language

Explore threat-based detection techniques and learn how to effectively identify adversaries using Event Query Language in this conference talk from Circle City Con 2019. Discover various approaches to finding unexpected threats, including remote access analysis, environment monitoring, persistence detection, process examination, and WMI investigation. Gain insights into analytics libraries, attack frameworks, and data normalization. Delve into future developments such as real-time streaming and connect with resources to enhance your cybersecurity skills in adversary hunting.