Active Countermeasures’ Post

I am thrilled to share that I have successfully completed the Threat Hunting: Foothold room. Throughout this experience, I delved into the intricacies of hunting malicious activity that indicates a potential initial compromise of a workstation or a machine. Additionally, I acquired valuable insights into the following topics: - Understanding the attacker's mindset in achieving initial access, Execution, Defence Evasion, Persistence, Command and Control. - Correlating succeeding actions executed by an attacker after obtaining a foothold. - Differentiating suspicious host and network events from benign ones. - Getting acquainted with the MITRE Tactics involved once an attacker gets inside the target organization. I utilized various resources to enhance my understanding, including the following search results: - Threat Hunting Week: Foothold: How to hunt suspicious activities | TryHackMe - Ye Lin Aung (Chris) on LinkedIn: TryHackMe | Threat Hunting: Foothold - Aamir Ehsan on LinkedIn: Threat Hunting: Foothold - TryHackMe WalkThrough - Threat Hunting: Foothold TryHackMe - YouTube - Persistent Footholds & Threat Hunting - KW Corporation #ThreatHunting #Cybersecurity #InfoSec #MITRE #SecurityOperations

Yes! My buddy Jeremy Weidner helped build out this ebook. The industry gets stuck on 'threat hunting' as a term which is most cases is only analysis work. Signatures alerting can only get you so far and having a human in your environment proactively looking for that IT admin doing legit but rogue activities is just one example of what could be discovered. If you get a moment, check out my buddies ebook, a great read!

Completed Threat Hunting & Hunting With Elastic module! ✅Insights into the process of threat hunting, and comprehending its relationship with risk assessment and incident handling. ✅Skills to accurately interpret a threat intelligence report. ✅Practical experience in performing threat hunting using the Elastic stack leveraging a multitude of log sources. *********** One of my favorite modules so far on the SOC path emphasizing the practical and giving you freedom to find the flags needed 5⭐.

Are you a threat hunter? Have you seen our latest research blog about the APT activity of DarkPink? Here is a very practical and real example of how to perform threat hunting activity to detect DLL side loading techniques that DarkPink has been seen using in their campaigns. Bravo to Roman Rezvukhin on this very practical, free post. https://lnkd.in/etD3jJ5G

What makes an effective Threat Hunting strategy? Check our guide on #ThreatHunting Maturity Model to evaluate your current hunting process and define what can be improved.

Buena guía para principiantes, paso a paso, sobre Threat Hunting: Threat Hunting for Beginners: Hunting Standard Dll-Injected C2 Implants https://lnkd.in/en_vNJqP

Day 39 of #100dayschallengeCompleted another milestone on TryHackMe. A great room to learn about Threat hunting and enter into the realm of the threats hunting and detection. The techniques and Procedures for threat hunting.  Overall a great room for starters. #100dayschallenge #tryhackme #threats #threathunting #cybersecurity #learning #100dayscyberchallenge #tryhackmerooms https://lnkd.in/g8s_mAP9

Sharing this Threat Hunting Framework created by the Cyborg Security(acquired by Intel 471) #threathunting team⚡ It covers the key elements of implementing an effective threat hunting program such as: ✅ pre-requisites 👥 team maturity ♻ the threat hunting cycle 🎯 hunting in action 💡 the long-term benefits of hunting I've shared this before, but we've got some new faces around here - Happy Hunting! #threathunting #threatdetection #threatintelligence #cybersecurity

Threat Hunting Done Right There's a common misconception among security vendors about the true nature of threat hunting, often mislabeling various activities under this term. To clarify and offer a precise definition of threat hunting, distinguishing it from what it's not, CyberMaxx released a comprehensive guide. Access your copy here https://gag.gl/qz1bqO

What makes an effective Threat Hunting strategy? Check our guide on the #ThreatHunting Maturity Model to evaluate your current hunting process and define what can be improved.