Главная
Study mode:
on
1
Introduction
2
Agenda
3
What is Threat Hunting
4
Activity Tracking
5
Measuring Success
6
Speak the Language
7
Select a Hypothesis
8
Hypothesis Driven Methodology
9
Data Collection
10
Network Hunting
11
PowerShell Remoting
12
Windows Event Forwarding
13
Summary
14
Data Analysis
15
ELQ
16
Data Enrichment
17
Hive
18
What is Normal
19
Data Analysis Analytics
20
Hive Observations
21
Accountability
22
Measurements
23
Questions
Description:
Learn about effective threat hunting techniques and overcoming organizational challenges in this 47-minute conference talk from BSidesPhilly 2017. Explore the fundamentals of threat hunting, including activity tracking, success measurement, and hypothesis-driven methodology. Discover practical approaches to data collection through network hunting, PowerShell remoting, and Windows event forwarding. Delve into data analysis using ELQ and Hive, focusing on identifying normal patterns and anomalies. Gain insights on accountability, measurements, and addressing common obstacles in implementing a robust threat hunting process within corporate environments.

Threat Hunting - Defining the Process While Circumventing Corporate Obstacles

Add to list