Book description
Beyond incident response and threat intelligence operations, threat hunting can provide an extra layer of defense for your company’s network. In many organizations, security analysts initiate threat hunting when they spot something weird—network conditions or activity not easily explained—in an effort to catch subtle, more deeply embedded attackers. With this practical ebook, you’ll explore how this method works and learn how to stage an effective threat hunting program and evaluate the results.
Author Michael Collins, chief scientist for the network security and data analysis company RedJack in Washington, DC, explains why threat hunting is an ideal support for your existing security operations center. With both architecture and attacks constantly changing, proactive threat hunting will help security analysts and security managers discover how your company’s assets really work.
- Learn about the process, goals, and benefits of threat hunting
- Examine your organization’s readiness for threat hunting, including the resources, data, and personnel you need
- Delve into the process using a typical threat hunting workflow
- Get a brief encyclopedia of threat hunting techniques, including core concepts and situational awareness
- Explore resources for additional threat hunting strategies and techniques
Table of contents
- An Introduction to Threat Hunting
- 1. Threat Hunting and Its Goals
- 2. Should You Hunt?
- 3. A Hunting Process
- 4. A Dictionary of Threat Hunting Techniques
- 5. References and Further Reading
Product information
- Title: Threat Hunting
- Author(s):
- Release date: May 2018
- Publisher(s): O'Reilly Media, Inc.
- ISBN: 9781492028253
You might also like
video
Threat Intelligence and Threat Hunting
7+ Hours of Video Instruction 7+ hours of video training exploring key threat intelligence and threat …
book
Practical Threat Intelligence and Data-Driven Threat Hunting
Get to grips with cyber threat intelligence and data-driven threat hunting while exploring expert tips and …
book
Threat Intelligence in Practice
Many organizations are discovering that traditional security tools alone aren’t enough to protect their networks. In …
book
Threat Modeling
Threat modeling is one of the most essential--and most misunderstood--parts of the development lifecycle. Whether you're …