Data matters: More effective threat hunting and defense with internet scan data

Показать описание

Whether hunting for forgotten infrastructure to defend, or discovering a network of C2 infrastructure during an investigation, internet scan datasets needed to come out with high quality and informed decisions are critical. Differences in scanner capabilities, shifting state-aligned perspectives on freedom of speech, as well as global physical routing can undermine data and ultimately impact decision-making. In this talk, we will discuss trends in internet presence, and how investigating, understanding, and in some cases combining your data sources can aid in higher quality results.

Derek Abdine @dabdine, Chief Technology Officer, Censys

#CTISummit #cyberthreatintelligence

SANS Digital Forensics and Incident Response
digital forensics
incident response
threat hunting
cyber threat intelligence
dfir training

Рекомендации по теме

Data matters: More effective threat hunting and defense with internet scan data

Data matters: More effective threat hunting and defense with internet scan data

Cybersecurity Threat Hunting Explained

Cloud Security Risks: Exploring the latest Threat Landscape Report

What is needed for effective threat detection and response

Enhancing Threat Detection with Big Data and AI

Data-Driven Threat Intelligence: Metrics On Indicator Dissemination And Sharing

Keynote: Threat Hunting: Old Data, New Tricks!

The Mind of a Hunter: A Cognitive, Data-Driven Approach - SANS Threat Hunting Summit 2017

After watching this, your brain will not be the same | Lara Boyd | TEDxVancouver

Effective Threat Intel Management - CTI SUMMIT 2017

Thresholds Are for Old Threats: Demystifying AI and Machine Learning to Enhance SOC Detection

Hunt and Gather: Developing Effective Threat Hunting Techniques

Why Threat Modeling is much more than just threat hunting.

Prevent Major Data Breaches with Threat Lifecycle Management Webcast

What Is Cyber Security | How It Works? | Cyber Security In 7 Minutes | Cyber Security | Simplilearn

Securing Your Apps and User Data via Threat Modeling with AACTT

Data For Good Exchange 2016: Eliminating Cyber Threat Whack-a-Mole: Developing a Risk Based Approach

Emerging Threats to Critical Infrastructure

Top security issues for 2011: Data loss prevention and internal threats

How to Protect Your Data Online

Hunting Powershell Obfuscation with Linear Regression | Threat Hunting & Incident Response Summi...

The Use of Rules Engines in Cybersecurity Threat Detection // Jeremy Thomas Jordan // MLOps Shorts

Understanding & Managing Collection to Support Threat Intelligence Analysis - SANS CTI Summit

Reimagining Intelligence Deliverables Using Structured Threat Content