Detection

In this course, you'll explore what's needed for a really effective threat-hunting program.

4 videos  //  144 minutes of training

Free training week — 1,400+ on-demand courses and hands-on labs

Course description

In order to have an effective threat-hunting program, the hunter needs access to the tools and data necessary to perform these tasks. Being proficient in Linux is key to cyber threat hunting. The best open-source tools are free and only work on Linux. Let’s talk about some of those tools.

Course syllabus

Setting Up Your Playground and ToolsDuration: 22:17

Prepare for threat hunting by setting up your tools.

Network Tools (PRTG, NTOP and More)Duration: 58:29

An introduction to several excellent tools all threat hunters should be or become familiar with.

SIEM is a must. Logging choices are important!Duration: 30:37

Introduction to SIEM tools and the key areas to collect logs.

Set Up AccessDuration: 33:05

The last thing a threat hunter needs is to request access to areas while performing proactive tasks. In this video, we will be covering some of the areas where the threat hunter needs visibility.

Meet the author

Marc Quibell

LinkedIn

Marc Quibell is a cybersecurity blue team expert with nearly 30 years of professional IT experience. In addition to being an Infosec Skills author, he’s a consultant and security architect with a Bachelors of Science in Technology Information Management from Upper Iowa University and an Associate of Applied Science in Computer Systems Networking from Texas State Technical College in Waco. Marc has been CISSP certified since 2009 and was previously CCNA, MCSE and CRISC certified.

Plans & pricing

Infosec Skills Personal

  • 190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Custom certification practice exams (e.g., CISSP, Security+)
  • Skill assessments
  • Infosec peer community support

Infosec Skills Teams

$799 per license / year

Book a Meeting
  • Team administration and reporting
  • Dedicated client success manager
  • Single sign-on (SSO)
    Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
  • Integrations via API
    Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
  • 190+ role-guided learning paths and assessments (e.g., Incident Response)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Create and assign custom learning paths
  • Custom certification practice exams (e.g., CISSP, CISA)
  • Optional upgrade: Guarantee team certification with live boot camps

Award-winning training that you can trust

IDC MarketScape Leader: U.S. IT Training

IDC MarketScape Leader: U.S. IT Training

Infosec Skills

eLearning Content

eLearning Content

Infosec Skills

Best Product - Cybersecurity Training for Infosec Professionals

Best Product - Cybersecurity Training for Infosec Professionals

Infosec Skills

Security Education & Platform

Security Education & Platform

Infosec Skills

Ranked #52 in Top 100 Global Software Sellers

Ranked #52 in Top 100 Global Software Sellers

Infosec