Network Based Threat Hunting: Lessons Learned, Techniques to Share
summary
Covers network-based threat hunting in cloud-native environments, contrasting traditional on-premises approaches with cloud-native security. Uses case studies and practical techniques for implementing network-focused hunting to detect threats that evade legacy solutions, with emphasis on cloud-native tools and practices.
AI-written summary · about
chapters (13)
- 0:00Start
- 0:07Network Based Threat Hunting
- 1:35Agenda
- 4:13Mitre Attack Framework
- 9:23Security in Layers
- 18:26Session Hijacking Attack
- 21:20Houdini Remote Access Trojan
- 21:59Houdini Remote Access Trojans
- 25:24Chachi Backdoor
- 29:02Stage of Ransomware Attack
- 37:04Northbound Communication
- 41:50Assess the Threats of Your Organization
- 42:34Continue To Assess the the Ever-Changing Threat Landscape
related talks
31mThreat Hunting — Demystified
34mFormulating An Intelligence-Driven Threat Hunting Methodology
36mSo You Want to Build a Threat Hunt Program
42mPractical Threat Hunting: Straight Facts and Substantial Impacts
43mThreat hunting in the cloud
30mBuilding Effective Attack Detection in the Cloud
40mHunt and Gather: Developing Effective Threat Hunting Techniques
53mPractical Threat Modeling for real-world and Cloud Situations in our hybrid and W...