Threat Hunting the Easy Way

The first step is to become familiar with attacker TTPs, tactics techniques and procedures, the real attacker thingies they do. If your organization has an application that runs on several servers you need to get familiar with the behavior of the admins of these servers and the operation of the servers. When you feel you understand the technology, you're probably done. When you know what technology or security solutions you have in your environment I will try to stay general …

cyber security cybersecurity cybersecurity awareness cybersecurity-top-story cyber threats hunting optimization threat threat hunting threat modeling