Detecting the Undetectable - Threat Hunting in Appliance Environments

Learn advanced threat hunting techniques for detecting persistent threats in appliance environments through this 22-minute conference talk from fwd:cloudsec. Explore how malicious actors exploit vulnerabilities and misconfigurations to maintain long-term access to target systems, particularly in appliance environments where administrators lack direct file system access. Discover how cloud environments provide unique advantages for collecting metadata at scale across diverse products, including appliances. Examine two real-world case studies demonstrating the use of extensive metadata analysis to uncover previously undetected threats. Master practical approaches for leveraging cloud-based metadata collection to enhance security detection capabilities in traditionally hard-to-monitor systems. Gain insights into collaborative strategies for strengthening defenses across appliance environments and understand how metadata analysis can significantly improve threat detection and remediation efforts.