Explore Threat Intelligence and Threat Hunting Concepts

---

Goals

• Understand threat actor concepts
• Explore advanced persistent threats
• Review tactics, techniques, and procedure (TTP) concepts
• Understand the importance of identifying active threats
• Review open-source intelligence and information-sharing concepts
• Review different types of threat-hunting activities
• Understand the importance of Indicators of Compromise (IoC)
• Review decoy methods

Explore Threat Actor Concepts

• Types of Threat Actors
• Supply chain access
  • attacks may also exploit the supply chain of an organization to gain access or launch an attack
• Advanced Persistent Threat (APT)
• Tactics, Techniques, and Procedures (TTPs)

Identify Active Threats

• Open-source Intelligence (OSINT)
  • Sources of OSINT
  • Defensive OSINT
• Threat Feeds
• Information Sharing and Analysis Centers (ISACs)
• Threat Information Sharing

Explore Threat Hunting Concepts

• Threat Hunting
  • Entity-driven hunt
  • Focus areas
• Indicators of Compromise (IoCs)

Decoy Methods and Concepts

• Active Defense
• Honeypots