Hunting Threat Actors Using OSINT

SANS DFIR Summit 2022

Speaker: Abi Waddell

Little attention is given to tracking the perpetrators of cyber-attacks in the world of forensics. DFIR teams can usually attempt to answer the question of what an attacker did, how they did it and when, but rarely who has done something. Fortunately, there are some methods of answering this question using open-source intelligence – methods which have been used successfully to trace the location and identity of threat actors in recent years. Attendees …

hunting osint threat threat actors