“I do have are a very particular set of skills, skills I have acquired over a very long career. Skills that make me a nightmare for people like you.” – Bryan Mills (Taken)
Wouldn’t it be nice if we all had the skills required to send that message to cybercrime actors? Wouldn’t it be nice if we had the skills to hunt serious threats in our own environment to
contain and remediate? This session will explore the concepts and benefits of threat hunting as well as the tools that can help us get there. Part of the consideration will be the evolving normal of IT environments. Chaos increases the need and the challenge of responding to and hunting threats.
Threat hunting should be something that every organization is capable of. Too many organizations are blind to the depth and even the presence of threats in their environment. It’s not all about specific skills learned over a long career. Skills make it easier; tools make it accessible. We have seen small organizations with a single administrator develop threat hunting as a part of an IT practice and seen organizations with established threat hunting teams streamline and augment their practice using the right tools. The planned take aways for this session will be for participants to understand the value proposition of threat hunting, when is threat hunting most important, what are the key elements of a threat hunt, and what tools can facilitate any team in becoming the most efficient hunters. It can be the difference between threats living in your environment for seconds or hours or months.