Advanced Threat Research Methodologies - Unraveling a Triple-APT Intrusion

Explore a 35-minute conference talk from SANS Cyber Threat Intelligence Summit that delves into advanced threat research methodologies through a complex case study of a triple nation-state APT cyber attack targeting government sectors. Learn sophisticated clustering techniques for untangling multiple kill chains, master attribution methodology based on the diamond model for linking clusters to nation-state actors, and discover intelligence-driven hunting approaches that reveal the extent of nation-state influence over government entities. Gain practical insights into threat intelligence research, including detailed technical procedures for conducting advanced investigations, strategies for addressing complex cyber threats, and methodologies for precise attribution. Through real-world examples presented by Palo Alto Networks threat researchers, acquire actionable techniques for navigating the challenging landscape of threat intelligence and enhancing investigative capabilities in addressing sophisticated cyber attacks.