7 hours ago

6 Threat Hunting Ideas You Can Use Today!

by Josh Campbell from Cyborg Security Threat hunting is often referred to as a semi-scientific practice. This is because hunters will deploy hunts based on a hypothesis, collect evidence, and document their findings — all of which should stir (hopefully) fond memories of grade 9 science class. And just like…

Threat Hunting

6 min read

May 19

Threat Hunting Hypothesis Examples: Five Hunts to Start Out

By Cyborg Security Introduction Structured threat hunting (often referred to as hypothesis-based hunting) remains one of the best ways that organizations can find previously undetected threats in their environment. It works so well because it structures the hunt around a central proposition, and at the end of the hunt, hunt teams…

Threat Hunting

4 min read

May 12

5 Threat Hunting Tips from a Seasoned Hunt Team

By Josh Campbell at Cyborg Security The threat hunting community is quite small. As a result of that, the threat hunting community is also very tight knit. This can make breaking into the field a challenge, especially when you are just starting out and looking for advice. …

Threat Intelligence

4 min read

5 Threat Hunting Tips from a Seasoned Hunt Team

May 5

Cyber Threat Hunting — What Is It, Really?

By Josh Campbell at Cyborg Security Cyber threat hunting is a sub-discipline to threat detection that relies on proactive and iterative searching through data to identify otherwise undetected threats. It does this through a variety of mechanisms and methodologies, typically by looking for statistical outliers (in so-called data-driven hunting) or…

Threat Hunting

6 min read

Mar 17

6 More Threat Hunting Tools Everyone in the Industry Should Be Using

By Josh Campbell at Cyborg Security One thing every threat hunter knows is that there is often more than one way to skin a… ahem… digital cat. And a lot of threat hunters will share their knowledge and toolsets with other hunters informally, making it hard for the burgeoning hunting…

Threat Hunting

4 min read

Mar 10

Cyber Threat Hunting: 4 More Videos to Make You an (Even) Better Threat Hunter!

By Josh Campbell at Cyborg Security One thing every threat hunter finds out early on is that learning to hunt ain’t easy. There is a lot of great material out there that tends to focus on theory and strategy, but a lot less that gets into the weeds of threat…

Threat Hunting

2 min read

Feb 17

Moving the Needle Forward on Threat Hunting

By Josh Campbell at Cyborg Security If you’ve been paying attention to the cyber security media and blogosphere throughout 2020 and 2021, you’ve heard the term “threat hunting” being used a lot. You’ve probably heard the definition, and about how it helps security teams, and how if you don’t have…

Threat Intelligence

5 min read

Moving the Needle Forward on Threat Hunting

Feb 10

Threat Hunt Deep Dives: Get to Know Your Logs — Pt. 2

By Lee Archinal at Cyborg Security Registry keys can be a very useful method for hunting and detecting malicious activity, but if they are ingested wholesale they can also be one of the noisiest methods of detection. However, if organizations take the time to understand how registry keys can…

Threat Intelligence

1 min read

Threat Hunt Deep Dives: Get to Know Your Logs — Pt. 2

By Lee Archinal at Cyborg Security

Registry keys can be a very useful method for hunting and detecting malicious activity, but if they are ingested wholesale they can also be one of the noisiest methods of detection. However, if organizations take the time to understand how registry keys can…

Jan 6

Critical CVEs: Why Chasing Squirrels is Driving the Whole Industry Nuts

By Josh Campbell from Cyborg Security Let’s face it: if you’ve been in the cyber security industry more than about 5 minutes, you’ve probably experienced the chaos that ensues when critical vulnerabilities, like zero days, are announced. The mayhem is always the same: CISOs scrambling to find out if their…

Threat Hunting

4 min read

Critical CVEs: Why Chasing Squirrels is Driving the Whole Industry Nuts

Dec 16, 2021

Log4j: Making the Case for Structured Hunting

by Josh Campbell at Cyborg Security As the year winds down, it was inevitable that someone was going to release something that was going to cause a bit of a panic before the New Year. What we didn’t know is just how big that panic could be with Log4j (aka…

Threat Hunting

4 min read

Log4j: Making the Case for Structured Hunting