Chapter 3: Team Construct

When constructing the line-up of a team, the goal is normally to have an effective hunt team that can tackle a specific objective with very little flailing. A team's construct will be unique in each organization and situation. Just as no two threat hunts are exactly the same, no two teams will be exactly the same. They will, however, have some shared fundamental concepts.

Assembling a highly effective hunt team takes time for both the organization and the individuals concerned. Certifications, degrees, and experience are all nice to have; however, they will all mean very little if the people behind them do not have the proper drive or mindset. Always start with personnel that is driven to unravel the puzzles they find ...

Get The Foundations of Threat Hunting now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.