Talk With an Expert

Making Sense of the Chaos

Making Sense of the Chaos (PDF, 1.14MB)Last updated: 24 Jul, 2025
Presented by:
Lee ArchinalArun  Warikoo
Lee Archinal & Arun Warikoo

Making Sense of the Chaos explores two distinct threat hunting approaches. Structured, hypothesis-driven hunts, and Unstructured hutns, where data leads the way. We'll discuss when to apply each method, and examine how different triggers - like intel reports or APT activity, can initiate a structured hunt. The talk will also cover how unstructured hunts unfold through data discovery. Attendees will gain insights into leveraging both approaches to achieve different objectives in threat hunting.

SANS DFIR Summit 2025
Making Sense of the Chaos