Threat Hunting for IOCs with Elastic Stack

Elasticsearch provides various ways to collect and enrich data with threat intel feeds that can be used within the Elastic Security detection engine to help security analysts detect alerts with threat indicator matching. In this video, we’ll provide an introduction to Cyber threat intelligence (CTI) and demonstrate how Elastic provides an easy way to ingest threat intelligence feeds and build some robust cyber threat intelligence capabilities.

Guest Speaker: Alessandro Brofferio, Senior Curriculum Developer & Trainer at Elastic, Former Technical Trainer in NGFW.

Questions? Ask us on discuss.elastic.co
Connect with us in our Slack workspace: https://ela.st/slack

#IOCs #CTI #ElasticSecurity #ThreatHunting #TechCommunity #Elasticsearch #DevOps