-: In this section of the course, 2 2
we're going to cover threat hunting. 3 3
Our focus again in this section 4 4
is going to continue to cover objectives 5 5
across multiple domains, specifically Domain 1, 6 6
Security Operations, and Domain 2, Vulnerability Management. 7 7
Objective 1.3 states that given a scenario, 8 8
you must use appropriate tools or techniques 9 9
to determine malicious activity. 10 10
Objective 1.4 states that you must be able to compare 11 11
and contrast threat intelligence 12 12
and threat hunting concepts. 13 13
And objective 2.5 states 14 14
that you must be able to explain concepts 15 15
related to vulnerability response, handling, and management. 16 16
So as we move through this section, 17 17
we're going to start out by describing the key factors used 18 18
in threat modeling, such as adversary capability, 19 19
total attack surface, attack vector, impact, 20 20
and the likelihood of the attack occurring 21 21
against a given system or network. 22 22
Then, we'll discuss the importance of threat hunting 23 23
and how it should be performed inside of our organizations. 24 24
After that, we'll start our coverage of various sources 25 25
of open-source intelligence. 26 26
This includes things like Google hacking, Shodan, 27 27
email and social media profiling techniques, 28 28
and DNS and website harvesting techniques. 29 29
You'll be amazed at just how much information is out there 30 30
and available for us to collect and analyze 31 31
as we start to experiment with open-source intelligence 32 32
and it's related techniques. 33 33
Then, we're going to discuss the AbuseIPDB tool, 34 34
which serves as a centralized database 35 35
that's going to be dedicated to helping combat the spread 36 36
of attackers, spammers, and abusive activity on the internet 37 37
by providing a centralized block list for webmasters, 38 38
system administrators, and cybersecurity professionals 39 39
to report and find IP addresses 40 40
that are known to have been associated 41 41
with malicious activity online. 42 42
Next, we'll venture into the deep web and the dark web 43 43
to see what kind of information can be found 44 44
in the darkest quarters of the internet. 45 45
And after that, we're going to discuss bug bounties, 46 46
which allows companies to incentivize ethical hackers 47 47
and penetration testers to seek out security holes 48 48
and vulnerabilities inside their software, websites, 49 49
and other products. 50 50
Finally, we're going to take a short quiz 51 51
to see what you learned during this section of the course 52 52
and review each of those quiz questions fully 53 53
to ensure that you can explain why the right answers 54 54
were right. 55 55
So, let's start exploring the world of threat hunting 56 56
in this section of the course.