Staying Ahead of the Game: Automate Your Threat Hunting Workflows

Подробнее о видео

SANS DFIR Summit 2022

Speaker: Towne Besel

Threat Hunting

This session is about finding, confirming and mitigating fresh Indicators of Compromise (IoC) with true automation. It is very important nowadays to stay up to date with all of the cyber threats posed all over the world. It is widely known that there are not enough resources to be found to fill up every security operation center (SOC). Therefore, many organizations struggle with coping with massive amounts of new types of attacks and generated alerts from their tooling. During this session, you will learn how to hunt (and automate your hunt) for active cyber threats in your environment and contain them using integrated connections to network, endpoint, and cloud products. The key component here to battle false positives, is correlation of sightings into a single incident.. This session is targeted at SOC management, cyber security engineers, threat hunters, and analysts. It will touch on threat

View upcoming Summits:
Download the presentation slides (SANS account required) at