Operationalizing Cyber Threat Intel: Pivoting & Hunting
The prevalence of Cyber Threat Intelligence (CTI) continues to grow within the incident response industry. This course teaches you how to extract, ingest, pivot on, and hunt for indicators from CTI to help you find what your security tools can't.
What you'll learn
Cyber Threat Intelligence (CTI) is all around us. You can generate intel yourself, pull indicators from a feed, subscribe to a commercial service, or simply extract intel from social media. However, what do you do with the intel once you obtain it? Many companies simply block atomic indicators within their firewalls and move on with life, but there's so much more to it than that! In this course, Operationalizing Cyber Threat Intel: Pivoting & Hunting, you'll explore how to ingest CTI properly. First, you'll learn to make the most of intel articles by extracting all the indicators they provide, even those that aren't obvious. Next, you'll discover how to pivot on your extracted indicators to provide a more holistic view of the threat. Finally, you'll touch on some techniques you can use to hunt for indicators within your network. After taking this course, you'll be better equipped to help protect your organization from threats by reviewing CTI sources and ingesting the information using a skilled, dynamic analysis method.
Table of contents
About the author
Ryan is a certified incident response analyst and reverse engineer who also wears the hats of a forensic analyst and developer. He thoroughly enjoys running his mouth, which lends well to his presenting at conferences and performing stand-up comedy. Ryan spent six years as a technical trainer, and he is passionate about life-long learning. Outside of work, Ryan enjoys practicing Brazilian Jiu Jitsu and rock climbing in addition to spending time with his wife and daughter.