Did you know you can use free, open-source, and off-the-shelf tools to find advanced attacker methodologies RIGHT NOW? With the right guidance, it really doesn’t take much. Join a real-life threat hunting practitioner who has built 24x7 hunting teams and established intuitive, sane, and very effective hunting methodologies that have led to routine sub-hour discoveries of nation-state attacks. This workshop will whittle down the craziness of the “threat hunting” market and help you understand what it really means as well as one battle tested way to do it well.

 

Things you’ll learn:

- how to not boil the ocean

- why catching attacker “hands-on-keyboard” activity is actually relatively easy

- tools you can deploy right now to help you hunt well

 

What this isn’t:

- a marketing pitch

- a theory that sounds cool but hasn’t been practiced

 

Ideal attendees:

- security analysts

- DFIR analysts

- intelligence analysts

- EDR analysts

- curious geeks

 

Required Equipment:

-Laptop (laptop with a Windows VM installed (Virtualbox is free) or the ability to install stuff on a Windows host)