Threat Hunting Techniques

Learn to hunt cyber threats using machine learning and real-world tools like Splunk and Jupyter Notebooks. This course covers log analysis, anomaly detection, and behavior-based threat hunting for proactive cybersecurity defense.

Interested in this course? Email us at [email protected]

Course curriculum

1. Segment: 00 Course Intro
2. Segment: 01 Overview of Threat Hunting Concepts and Importance
3. Segment: 02 How to Plan Threat Hunt
4. Segment: 03 How to Document Threat Hunt
1. Segment: 04 Hunting Methodologies
2. Segment: 05 Telemetry and Data Sources
3. Segment: 06 Essential Tools for Threat Hunting
1. Segment: 07 Explore MITRE ATT_CK
2. Segment: 08 How to Use MITRE Navigator_
3. Segment: 09 From ATT_CK to Action Building a Hunt Matrix for Real Threats
4. Segment: 10 Reading: MITRE Framework
5. Reading: - MITRE Framework
1. Segment: 13 Parsing and Cleaning Logs
2. Segment: 14 Techniques for Log Parsing and Cleaning Part 1
3. Segment: 15 Techniques for Log Parsing and Cleaning Part 2
1. Segment: 16 Introduction to Feature Engineering_
2. Segment: 17 Visualizing Behaviors
3. Segment: 18 Threat Hunting Visualization_
1. Segment: 19 What is Security-Focused Visualization
2. Segment: 20 Create Your Own Visualization
3. Segment: 21 Top Security Visualizations Every Threat Hunter Should Use
4. Segment: 22 Reading: Effective Data Visualization
5. Reading:- Effective Data Visualization
1. Segment: 25 Introduction to Unsupervised ML
2. Segment: 26 Understand Different Process of Unsupervised Learning Models
3. Segment: 27 Evaluating and Tuning ML Models
1. Segment: 28 Suspicious Login Hunting
2. Segment: 29 Graphical Representation of Anomaly
3. Segment: 30 Event Correlation
1. Segment: 31 General Pitfalls in Threat Detection_
2. Segment: 32 Different ML techniques_
3. Segment: 33 How to choose Best ML Model
4. Segment: 34 Reading: Splunk Machine Learning Toolkit Guide
1. Segment: 37 Understand Splunk Architecture
2. Segment: 38 Log Ingestion in Splunk
3. Segment: 39 Search Operation in Splunk
1. Segment: 40 Writing SPL for Data Prep
2. Segment: 41 Jupyter Detection Pipeline
3. Segment: 42 Threat Hunt Notebook Example_
1. Segment: 43 Splunk and Jupyter Integration Part1
2. Segment: 44 Elastic and Jupyter Integration Part2
3. Segment: 45 Real Hunt Execution
4. Segment: 46 Outro_Course Wrap-up Video
5. Segment: 47 Reading: Finding a needle in a haystack: Machine learning at the forefront of threat hunting research

About this course

Free
44 lessons
4 hours of video content

Discover your potential, starting today

Enroll today

Threat Hunting Techniques

Course curriculum

Chapter 1 - What is Threat Hunting?

Chapter 2 - Hunting Methodologies

Chapter 3 - ATT&CK and Hunt Matrix

Chapter 4 - Introduction to Data Science

Chapter 5 - What is Feature Engineering in Threat Hunting

Chapter 6 - Security-focused visualization examples

Chapter 7 - Unsupervised ML Basics

Chapter 8 - Case Study: Suspicious Logins

Chapter 9 - Different use cases for ML-based Hunting

Chapter 10 - Log Ingestion in Splunk

Chapter 11 - Writing SPL for Data Preparation

Chapter 12 - Splunk and Jupyter Integration

About this course

Discover your potential, starting today