Topics:

• Hunting maturity model

• Creating hypotheses

• Data-driven hunting

Topics:

• MITRE ATT&CK deep-dive

• Lateral movement indicators

• Credential dumping patterns

Topics:

• Detecting stealthy C2

• Unusual network patterns

• Abnormal process execution

Assignment:
Write 3 hunting hypotheses + expected data sources.

Topics:

• Documenting detection gaps

• Recommendations for SIEM rules

• Executive summaries