Threat Hunting Courses and Certifications

Security BSides San Francisco

Threat Hunting - Using MITRE ATT&CK Against Carbanak Malware

Apply the MITRE ATT&CK framework to threat hunting by tracing Carbanak malware tactics, techniques, and behaviors across a banking attack.

• YouTube
• 51 minutes
• Self-Paced
• Conference Talk

Black Hat

The Open Threat Hunting Framework - Enabling Organizations to Build, Operationalize, and Scale Threat

A framework for aligning what organizations mean by threat hunting and building, operationalizing, and scaling their hunt programs.

• YouTube
• 28 minutes
• Self-Paced
• Conference Talk

44CON Information Security Conference

Threat Hunting - From Bodging to Efficiency in 7 Steps

Melissa Goldsmith presents threat hunting as an approachable practice that begins with curiosity and basic concepts rather than an elite specialty.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

RSA Conference

Threat Hunting Using 16th-Century Math and Sesame Street

Use numerical patterns and machine behavior to hunt threats across network and endpoint data, regardless of attack specifics.

• YouTube
• 43 minutes
• Self-Paced
• Conference Talk

Security BSides San Francisco

Practical Threat Hunting With Machine Learning

Practical threat hunting with machine learning models, illustrated through case studies of high-value threat detections.

• YouTube
• 37 minutes
• Self-Paced
• Conference Talk

RSA Conference

The Game of Cyber Threat Hunting - The Return of the Fun

A live demo introduces new approaches that bring creativity and excitement back to cyber threat hunting.

• YouTube
• 40 minutes
• Self-Paced
• Conference Talk

BSidesLV

Secrets of the Second Factor - Threat Hunting with Multi Factor Authentication

Threat hunting focused on the security implications of multi-factor authentication.

• YouTube
• 47 minutes
• Self-Paced
• Conference Talk

BasisTech

ARTHIR - ATT&CK Remote Threat Hunting Incident Response Windows Tool

Modular framework for remote threat hunting and incident response on Windows systems, mapping capabilities to MITRE ATT&CK Framework. Improves on Kansa with expanded functionality and community collaboration.

• YouTube
• 31 minutes
• Self-Paced
• Conference Talk

Security Onion

Security Onion Essentials 2024 - Threat Hunting

Explore threat hunting techniques in Security Onion 2.4.70, enhancing your cybersecurity skills and network defense capabilities.

• YouTube
• 17 minutes
• Self-Paced
• Conference Talk

INFOSEC TRAIN

Cyber Threat Hunting and DFIR - Understanding Malware Attack Steps

Explore cyber threat hunting and DFIR techniques, including malware attack paths, detection methods, and essential skills for strengthening organizational cybersecurity defenses.

• YouTube
• 47 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Patience Brings Prey - Lessons Learned from a Year of Threat Hunting in the Cloud

Discover vendor-agnostic cloud threat hunting strategies combining hypothesis-driven investigations, TTP-based hunts, and anomaly detection to uncover sophisticated cloud-native attacks.

• YouTube
• 25 minutes
• Self-Paced
• Free Video

BSidesCharm

Closing the Visibility Gap: Threat Hunting with Hawk in the Microsoft Cloud

Discover how Hawk, a free open-source tool, automates log collection from Microsoft Cloud environments, helping security teams reduce investigation time, flag high-risk behaviors, and effectively hunt for threats without costly commercial solutions.

• YouTube
• 50 minutes
• Self-Paced
• Free Video

fwd:cloudsec

Hunting AWS Threat Actors Using Access Analyzer Policy Suggestions

Discover how to leverage AWS Access Analyzer for threat detection by creating behavioral baselines, analyzing risk patterns, and implementing SIEM-agnostic hunting techniques across cloud environments.

• YouTube
• 24 minutes
• Self-Paced
• Free Video

BSidesCharm

What's in the Cloud? - Cloud Threat Detection and Hunting Strategies

Discover cloud threat hunting strategies using Jupyter notebooks with MITRE ATT&CK mapping and unsupervised machine learning techniques for anomaly detection and visualization in mature SOC environments.

• YouTube
• 34 minutes
• Self-Paced
• Free Video

Elevate Cloud Threat Hunting with AI

Explore AI-powered cloud threat hunting with Kestrel as a Service, enhancing detection speed and efficiency through reusable hunting flows and predictive AI model plugins.

• YouTube
• 29 minutes
• Self-Paced
• Free Video