Six Steps to Effective ICS Threat Hunting

Overview

Explore a comprehensive 6-step ICS threat hunting model applied to real-world scenarios in this 1-hour 10-minute webinar. Gain insights from Dragos and SANS Institute experts as they delve into environment vs threat hunting, threat intelligence, and effective tools and techniques. Learn about different types of threat hunting, utilizing various intel feeds, and the importance of baselines and coverage. Discover how to initiate conversations around threat hunting, apply the threat hunting model, and understand the trend hunting approach. Engage with a lightning round of questions and explore the crucial aspects of people, process, and technology in industrial cybersecurity.

Syllabus

Introduction
Two Types of Threat Hunting
Environment vs Threat Hunting
Threat Intel
Questions
Favorite Threat Intel Feed
Using Open Source Reporting
Dragos Intel Feed
Commercial Intel Feed
Technical Reports
Activity Groups
Baselines
Coverage
Start the Conversation
Tools Techniques Approach
Purpose
Threat Hunting Model Applied
Trend Hunting Model Applied
Trend Hunting Approach
Lightning Round Question
People Process and Technology

Taught by

Dragos: ICS Cybersecurity

Reviews

Start your review of Six Steps to Effective ICS Threat Hunting

Taught by

ICS SCADA Threat Hunting

Rising Cyber Escalation: US, Iran, Russia ICS Threats and Response

ICS Threat Activity Groups - Dragos 2018 Year in Review

Industrial Control Systems Cybersecurity - 2020 Year in Review and Threat Landscape

Using OSINT to Defend Against ICS Attacks

Evaluating ICS Vulnerabilities - Prioritization and Mitigation Strategies

Never Stop Learning.