Threat Hunting After SolarWinds Solar Storm
You’ve read the FireEye report and reviewed CISA’s Alerts. You’ve reviewed all the IOCs. Now what? Where does threat hunting begin in your environment, and at what point can it end? If CISA, FireEye and SolarWinds have provided us with “known knowns,” what about the “unknown knowns” - like other third party compromises that have been reported? What’s a security team to do?
Find out in this exclusive workshop with QOMPLX Senior OSINT Specialist and resident red team expert Joe Gray. Joe will discuss:
•The best approach for standing up a potent threat hunting operation in your organization;
•How to establish “ground truth” in your environment; and
•How to look beyond the IOCs to assess your organization security posture.
As a member of the Password Inspection Agency, Joe has consistently performed well in Capture the Flag events, specifically those involving OSINT. Examples include 2nd Place in the HackFest Quebec Missing Persons CTF and Winning the TraceLabs OSINT Search Party during DEFCON 28. Independently, Joe placed 4th in the DerbyCon OSINT CTF and 3rd in the National Child Protection Task Force Missing Persons CTF.
Joe has contributed material for a variety of platforms such as Forbes and Dark Reading in addition to his platforms. Joe has authored the OSINT tools DECEPTICON Bot and WikiLeaker in addition to the forthcoming book, Practical Social Engineering, due in June 2021 via NoStarch Press.
