Practical Learnings for Threat Hunting and Improving Your Security Posture
summary
Covers using threat intelligence to guide proactive threat hunting and strengthen security posture, with concrete focus on threat intelligence practices from Microsoft and operational lessons from NHS England securing a complex network. Discusses approaches for integrating threat intelligence into hunting workflows and real-world improvements observed while hardening a large healthcare environment.
AI-written summary · about
chapters (28)
- 0:00Intro
- 1:13The Intelligence Life Cycle
- 2:45Ransomware
- 4:56Dev Groups
- 7:43Dev504
- 8:22Dev252
- 10:59Dev206Dev243
- 13:56Elbrus
- 17:01Dev401
- 18:44Commonality
- 24:06Cyber Crime Economy
- 24:47Network Design
- 28:29Fancy Solution
- 30:18Thank you
- 31:33My background
- 32:01What do we look after
- 33:09During the pandemic
- 34:35Challenges
- 35:13Protect the NHS
- 35:36Supply Chain Risk
- 37:41Failure is the Key
- 38:31Commodity Malware
- 39:08What should we be interested in
- 40:59Threat Hunting Life Cycle
- 42:27Have Rules
- 43:02High Severity Alert
- 44:23Beneficial Activities
- 46:02Team Diversity
related talks
42mPractical Threat Hunting: Straight Facts and Substantial Impacts
31mThreat Hunting — Demystified
34mFormulating An Intelligence-Driven Threat Hunting Methodology
36mSo You Want to Build a Threat Hunt Program
20mMaximize the Value of Your Threat Intelligence
46mWhat's new in Microsoft Threat Protection
34mKeynote: Multiplying Threat Intelligence
40mHunt and Gather: Developing Effective Threat Hunting Techniques