Two pillars of a successful and proactive SOC are threat hunting and incident response. The use of network traffic analysis can help improve performance in these two areas, if you can trust the data. In this session, you will learn: Current attack practices, including abuse of legitimate traffic and encryption How hunters hide from attackers to avoid counter IR maneuvers Ways to make analysts faster and more effective at validating and responding to threats Options for empowering cross-training and on-the-job training to increase analysts' skills Clarity on how gaining visibility into cloud and encrypted traffic