EP108 How to Hunt the Cloud: Lessons and Experiences from Years of Threat Hunting

Topics covered:

• Please define threat hunting  for us quickly, the term has been corrupted a bit.
• What are your favorite beginner hunts to jump start the effort at a new team?
• How to incorporate hunting lessons in detection?
• What are the differences for hunting in the cloud?
• Are there specific data sources you prefer to have access to when threat hunting? In the cloud?
• Should every organization threat hunt?
• What are traits you might look for in a threat hunter?