A lot has been said about threat hunting, by a lot of people. They'll tell you how difficult it is, what products you should use, how to automate the pain away, and how you should've been doing this all along. But here's the thing...you have been doing it all along. The concepts and techniques aren't and shouldn't be new. You know this stuff, and it doesn't take a rocket surgeon to put some structure around it and develop a hunting program. So join us for some straight talk about what's valuable, what isn't, and where to focus when what you're looking for is wrongdoers and results.
