Class Central is learner-supported. When you buy through links on our site, we may earn an affiliate commission.

Pluralsight

Threat Hunting: Endpoint Hunting

via Pluralsight

Overview

Being responsible to go find the anomalies within an environment can be a daunting task. This course will teach you how to hunt through endpoint artifacts to find malicious behavior.

Finding anomalies or malicious artifacts without the help of alerts or defensive mechanisms can be very challenging. In this course, Threat Hunting: Endpoint Hunting, you’ll learn to hunt for specific APT techniques found in endpoint data. First, you’ll explore the various endpoint data sets and how to take advantage of correlation. Next, you’ll discover how to find artifacts related to initial access, implants, and persistence. Finally, you’ll learn how to detect behaviors related to privilege escalation and credential stealing. When you’re finished with this course, you’ll have the skills and knowledge of endpoint hunting needed to provide the proactive approach to security analytics.

Syllabus

  • Course Overview 1min
  • Endpoint Data Sets 16mins
  • Access and Implants 17mins
  • Persistence 20mins
  • Privilege Escalation and Credential Stealing 12mins
  • Impossible Login 12mins

Taught by

Brandon DeVault

Reviews

4.8 rating at Pluralsight based on 16 ratings

Start your review of Threat Hunting: Endpoint Hunting

Never Stop Learning.

Get personalized course recommendations, track subjects and courses with reminders, and more.

Someone learning on their laptop while sitting on the floor.