Join Cisco's Threat Hunting Workshop to develop your skills and test your abilities
In the heat of a crisis, every keystroke counts, and indecision could cost your organisation millions. At the end of the workshop you will be armed with knowledge and hands-on experience in hunting down threats and defending networks against advanced adversaries.
The workshop consists of an introduction to threat hunting and its importance as part of a security strategy, followed by three hands on labs that illustrate the main aspects of threat hunting. To frame the content, delegates will search for, analyse and overcome a simulated incident centred on the Silence APT.
Silence - Detect
The activities of the APT known as "Silence" have drawn the interest of the C-suite in your industry. Have they gotten into your environment? How would you know if they had? In this section of the course, we're going to find some observables related to Silence, as well as get an idea of their Tactics, Techniques, and Procedures.
Silence - Scope and Contain
Unfortunately, your boss' fears were not unfounded; you have Silence running amok in your environment. How will you combat their TTP's? How do you detect evidence of Living-off-the-Land techniques?
Silence - Remediate
You've slammed the door on Silence's activity on this machine and prevented new outbreaks across your environment. Now, it's time to ensure that the machine(s) affected by it are back to normal. Using the MITRE ATT&CK framework of this adversary, can you find all the breadcrumbs left by them?
Interested? Please register opposite. We look forward to seeing you there!
