Hunting Methodology: A key to the labyrinth of network forensics

No ratings

Presented at BSidesVancouver 2017 by

Matthew Tharp

Proactive hunting is the newest cybersecurity strategy and promises great potential. But where is one to start in the world of network forensics? This presentation presents a methodology for exactly that. It walks through the maze of network protocols with a spool of thread; discussing the protocols of interest, what to look for in each protocol, and how to find the cheese.