Generating Hypotheses for Successful Threat Hunting

Threat hunting is a proactive and iterative approach to detecting threats. Although threat hunters should rely heavily on automation and machine assistance, the process itself cannot be fully automated. One of the human's key contributions to a hunt is the formulation of a hypotheses to guide the...

By

August 15, 2016

All papers are copyrighted. No re-posting of papers is permitted

Related Content

SCA_Blog_Cyber Skills Shortage_340 x 340.jpg

Cybersecurity and IT Essentials

Cyber Skills Shortage: SANS Institute to Triple Academy Cybersecurity Scholarships By 2026

The cost of a bad hire in cybersecurity isn’t just about money, it’s about risk, downtime, lost productivity, and missed opportunities.

Offensive Operations, Pen Testing, and Red Teaming, Penetration Testing and Red Teaming, Cybersecurity and IT Essentials, Cyber Defense

Month of PowerShell: Fileless Malware with Get-Clipboard

Let's take a look at a sneaky attack to use PowerShell maliciously while evading detection (and some ways to detect it).

Cyber Defense, Cybersecurity and IT Essentials

Month of PowerShell: Solving Problems (DeepBlueCLI, Syslog, and JSON)

Let's look at an example of problem solving using PowerShell with DeepBlueCLI, Syslog, and JSON data.