Скачать или смотреть When to Conduct Structured and Unstructured Threat Hunts

Making Sense of the Chaos: When to Conduct Structured and Unstructured Threat Hunts

🎙️ Lee Archinal, Senior Threat Hunt Analyst, Intel 471
🎙️ Arun Warikoo, Head of Cyber Threat Intelligence, CIB Americas BNP Paribas , BNP Paribas
📍 Presented at SANS DFIR Summit 2025

Making Sense of the Chaos explores two distinct threat hunting approaches. Structured, hypothesis-driven hunts, and Unstructured hunts, where data leads the way.

We'll discuss when to apply each method, and examine how different triggers - like intel reports or APT activity, can initiate a structured hunt. The talk will also cover how unstructured hunts unfold through data discovery. Attendees will gain insights into leveraging both approaches to achieve different objectives in threat hunting.

View upcoming Summits: https://www.sans.org/u/DuS