Explore a conference talk on detecting known unknowns in cybersecurity. Learn about the Pyramid of Pain, the Pandora project's main focus points, and a tailored defensive solution using TTP-based threat hunting. Discover the methodology workflow, including baseline establishment, threat modeling, and testing environments. Examine deliverables, a use case, and results of the testing phase. Gain insights into future developments in this field and understand how to apply these concepts to enhance your organization's security posture.
Detecting Known Unknowns in DevSecOps - A Tailored Defensive Approach
Overview
Syllabus
intro
preamble
about fulvio
pyramid of pain
is it necessary ?
three main focus poins of the pandora project
a tailored defensive solution
ttp based threat hunting
methodology workflow
baseline and its impact
threat model
testing environment
deliverables
use case
testing phase
results
what next ?
thank you, questions ?
Taught by
Conf42
