Patience Brings Prey - Lessons Learned from a Year of Threat Hunting in the Cloud

Learn advanced cloud threat hunting methodologies through a comprehensive 25-minute conference talk that explores vendor-agnostic strategies for detecting sophisticated cloud-native attacks. Discover how seasoned cybersecurity professionals have expanded their threat hunting operations over 18 months to uncover large-scale, cascading attacks targeting cloud infrastructure beyond typical cryptocurrency mining threats. Explore a unique three-pronged approach combining hypothesis-driven investigations, TTP-based hunts, and anomaly detection to proactively identify threats at scale across cloud environments. Gain insights into experimental cross-functional hunt operations that extend beyond core security teams and understand the evolving landscape of cloud-native threats through real-world analysis of large-scale cloud attack surfaces. Master practical techniques for strengthening cloud security defenses against both nation-state and criminally motivated adversaries targeting modern cloud infrastructure.