2017 TechNet Augusta

TechTalk Session 4: "Threat Hunting: Beyond the Buzz" (Room Lamar A)

10 Aug 17
9:45 AM - 10:45 AM

Tracks: TechTalk Theater

Threat Hunting has become one of the hottest buzzwords in the cybersecurity industry, but for many there is are lingering questions: What exactly is threat hunting and how do I begin?

In this talk, we will explore threat hunting frameworks and building blocks and also cover how advanced machine learning analytics and link analysis can be used to jumpstart threat hunting efforts in any organization. Some of the specific topics to be covered will include:

  • Threat Hunting definitions
  • Threat Hunting Maturity Model
  • The Threat Hunting Loop
  • Types of Hunt Teams
  • Example Hunts, e.g., hunting for lateral movement, hunting for command and control

Audience members will leave the talk with a foundation on what threat hunting is and how to get started.