Operationalizing Cyber Threat Intel: Pivoting & Hunting

The prevalence of Cyber Threat Intelligence (CTI) continues to grow within the incident response industry. This course teaches you how to extract, ingest, pivot on, and hunt for indicators from CTI to help you find what your security tools can't.
Course info
Level
Intermediate
Updated
Oct 22, 2018
Duration
2h 34m
Table of contents
Description
Course info
Level
Intermediate
Updated
Oct 22, 2018
Duration
2h 34m
Description

Cyber Threat Intelligence (CTI) is all around us. You can generate intel yourself, pull indicators from a feed, subscribe to a commercial service, or simply extract intel from social media. However, what do you do with the intel once you obtain it? Many companies simply block atomic indicators within their firewalls and move on with life, but there's so much more to it than that! In this course, Operationalizing Cyber Threat Intel: Pivoting & Hunting, you'll explore how to ingest CTI properly. First, you'll learn to make the most of intel articles by extracting all the indicators they provide, even those that aren't obvious. Next, you'll discover how to pivot on your extracted indicators to provide a more holistic view of the threat. Finally, you'll touch on some techniques you can use to hunt for indicators within your network. After taking this course, you'll be better equipped to help protect your organization from threats by reviewing CTI sources and ingesting the information using a skilled, dynamic analysis method.

About the author
About the author

Ryan is a certified incident response analyst and reverse engineer who also wears the hats of forensic analyst and developer. He enjoys speaking at conferences and performing stand-up comedy. Ryan spent six years as a technical trainer, and he is passionate about life-long learning.

More from the author
Hands-On Incident Response Fundamentals
Beginner
3h 22m
20 Jan 2017