Human Hunting - Sean Gillespie

Explore advanced techniques for detecting and countering human adversaries in cybersecurity through this 49-minute conference talk from BSides San Francisco 2015. Delve into the concept of human hunting, comparing automated systems with human-driven approaches. Learn about cyber warriors, adversary tactics, and essential tools for effective threat hunting. Discover the importance of collection systems, alert management, and threat research. Gain insights into hunting methodologies using GRR (Google Rapid Response), including preparation, process definition, and target identification. Follow along as the speaker demonstrates practical hunting techniques, from file placement to advanced hunting strategies, equipping you with valuable skills to enhance your organization's cybersecurity posture.

Intro
Summary
Automation is Great...
A Tale of Two Systems
Shall We Play A Game
Cyber Warriors
The Adversary - The Most Dangerous Game
What You Need to Hunt
Human Adversary - Human Defender
Collection Systems
Alert Management
Threat Research
Hunting with GRR
GRR Overview
Preparations & Process
What to Hunt
How to Hunt
The Hunt Begins
File Placement
Stacked Results
Advanced Hunting