Deadwood 2020 (Virtual Con)
Back To Schedule
Thursday, September 24 • 11:00am - 11:50am
Hunting by Numbers: Defensive Hunting Program and Outcomes

Sign up or log in to save this to your schedule, view media, leave feedback and see who's attending!

Crowley walks through the steps he wants Network Defenders to go through to hunt. Step by step on how to prepare, how to select hunts, data to collect in advance, data to collect along the way, and how to put the tools away when you're done so the next hunt is more productive and effective. He discusses easy ways to report on the effort with tangible outputs (including easy to collect metrics) that demonstrate the value of hunting to your management and constituents.
This talk presents your new way to establish the routing for hunting, explains how this relates to SIEM Use Cases, and gives a winning strategy to gain the time to actually take this proactive measure in your organization. Less "we don't have time to hunt" and more "hold my flask and stand back."

avatar for Christopher Crowley

Christopher Crowley

Christopher Crowley has 20 years of industry experience managing and securing networks, his first job in the field was as an Ultrix and VMS systems administrator at 15 years old. He is a Senior Instructor for the SANS Institute, the course author for SOC-Class.com. He holds a multitude... Read More →

Thursday September 24, 2020 11:00am - 11:50am MDT
Track 1