SANS 2021 features 30+ Interactive Courses, Three NetWars Tournaments, Trivia Night, and Bonus Talks. Save $150 thru Tomorrow!


To attend this webcast, login to your SANS Account or create your Account.

This webcast has been archived. To view the webcast login into your SANS Portal Account or create an account by clicking the "Get Registered" button on the right. Once you register, you can download the presentation slides below.

Maximizing Threat Hunting Efficiency with Automated Queries

  • Thursday, November 21, 2019 at 1:00 PM EST (2019-11-21 18:00:00 UTC)
  • Eric Hulse, Daniel Bates


  • Cisco Systems Inc.

You can now attend the webcast using your mobile device!



Security analysts consume and process thousands of threat intelligence indicators every day.†The vast majority of these are simple atomic or computed indicators such as IPs, domain names, file hashes, and signatures. While these are important pieces of the threat hunting puzzle, searching on these parameters can be time consuming, making it difficult to get to the heart of your threat hunt.†

Join our webinar to learn how you can automate these queries with Cisco Threat Response and AMP for Endpoints. Well also introduce new capabilities that make searching and file analysis even easier including Orbital and Threat Grid File Analysis. These tools give security professionals time back to conduct research and build truly effective threat hunts.

Speaker Bios

Eric Hulse

A United States Air Force and Operation Enduring Freedom Veteran, Ericís focus is on Reverse Engineering and Threat Intelligence. As part of the acquisition of ThreatGRID by Cisco Systems, Eric leads the Research & Efficacy Team for the Advanced Threat Solutions Group.

Prior to ThreatGRID, Eric worked as a contractor for various US Air Force and DOD Customers where he worked in various capacities as a Reverse Engineer and penetration tester, Red Teamer and Analyst.

Eric Holds a Masters Degree in Information Assurance Engineering from Capitol College, and a Bachelor of Science in Computer Science from Park University.

Daniel Bates

Daniel Bates is a solutions architect at Cisco Systems, specializing in endpoint security, threat detection and analysis, and security education. Daniel previously worked for the Department of Defense securing tactical, strategic, and applied research information systems everywhere from the Southwest United States to Southwest Asia.

Need Help? Visit our FAQ page or email

Not able to attend a SANS webcast? All Webcasts are archived so you may view and listen at a time convenient to your schedule. View our webcast archive and access webcast recordings/PDF slides.