Threat Hunting, beyond just tools

No ratings

Presented at BSidesCDMX 2019 by

This presentation aims to explain that Threat Hunting is a Procedure that is necessary nowadays to identify advanced threats that security products do not recognize, and although there are tools that automate threat hunting, the Threat Hunting needs the commitment of several areas to properly manage the incidents, starting from Top Management, to digital assets owners. Methodologies that could be perfectly combined to start from scratch until an adequate level of maturity will be presented. Experiences will also be presented with the challenges that I have had to overcome in order to achieve an adequate implementation of Incident Management Processes.