Open Season - Setting Up Structured Threat Hunting

Presented at CircleCityCon 10.0 (2023) Virtual, June 24, 2023, 3 p.m. (60 minutes).

Threat Hunting has been around for about the past 8 years but there has been very little documentation on how to get started tracking, managing, and reporting hunts in a structured manner. In this session atendees will learn how to get started with tracking and managing threat hunts in a structured manner using using common tools within the Microsoft O365 realm and also learning how to document hunts with Obsidian.

Presenters:

• Nathan Apperson
• Chris Martinez

Similar Presentations:

• Black Hat USA 2012 / STIX: The Structured Threat Information eXpression
• Black Hat Europe 2017 / Accelerate the Hunt: Make Attackers’ Lives Harder with Effective Threat-Hunting
• Black Hat USA 2022 / The Open Threat Hunting Framework: Enabling Organizations to Build, Operationalize, and Scale Threat Hunting