Costa-Gazcón Practical Threat Intelligence and Data-Driven Threat Hunting

A hands-on guide to threat hunting with the ATT&CK™ Framework and open source tools
1. Auflage 2021
ISBN: 978-1-83855-163-6
Verlag: De Gruyter
Format: EPUB
Kopierschutz: 0 - No protection

E-Book, Englisch, 398 Seiten

No detailed description available for "Practical Threat Intelligence and Data-Driven Threat Hunting".

Autoren/Hrsg.

Costa-Gazcón, Valentina

Fachgebiete

• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Schadprogramme (Viren, Trojaner etc.)
• Mathematik | Informatik EDV | Informatik Programmierung | Softwareentwicklung Programmier- und Skriptsprachen
• Mathematik | Informatik EDV | Informatik Technische Informatik Computersicherheit Datensicherheit, Datenschutz

Inhaltsverzeichnis

Table of Contents - What is Cyber Threat Intelligence?
- What is Threat Hunting?
- Where Does the Data Come From?
- Mapping the Adversary
- Working with Data
- Emulating the Adversary
- Creating a Research Environment
- How to Query the Data
- Hunting for the Adversary
- Importance of Documenting and Automating the Process
- Assessing Data Quality
- Understanding the Output
- Defining Good Metrics to Track Success
- Engaging the Response Team and Communicating the Result to Executives

Über Autor(innen)

Costa-Gazcón Valentina:

Valentina Costa-Gazcón is a cyber threat intelligence analyst who specializes in tracking Advanced Persistent Threats (APTs) worldwide, using the MITRE ATT&CK Framework to analyze their tools, tactics, techniques, and procedures (TTPs). She is a self-taught developer and threat hunter with a degree in translation and interpretation from the Universidad de Málaga (UMA) and a cyber security diploma from Argentina's Universidad Tecnológica Nacional (UTN). Valentina also is one of the founders of the BlueSpace community (BlueSpaceSec) and one of the core members of Open Threat Research, founded by Roberto Rodriguez (OTR_Community).