Course

Detection

In this course, you'll explore what's needed for a really effective threat-hunting program.
2 hours, 12 minutes 4 videos
Start a Free Trial

Course description

In order to have an effective threat-hunting program, the hunter needs access to the tools and data necessary to perform these tasks. Being proficient in Linux is key to cyber threat hunting. The best open-source tools are free and only work on Linux. Let's talk about some of those tools.

Syllabus

Set Up Access

Video - 00:28:00
The last thing a threat hunter needs is to request access to areas while performing proactive tasks. In this video, we will be covering some of the areas where the threat hunter needs visibility.
SIEM is a must. Logging choices are important!

Video - 00:27:00
Introduction to SIEM tools and the key areas to collect logs.
Network Tools (PRTG, NTOP and More)

Video - 00:55:00
An introduction to several excellent tools all threat hunters should be or become familiar with.
Setting Up Your Playground and Tools

Video - 00:22:00
Prepare for threat hunting by setting up your tools.

Meet the author

Marc Quibell is a cybersecurity blue team expert with nearly 30 years of professional IT experience. In addition to being an Infosec Skills author, he's a consultant and security architect with a Bachelors of Science in Technology Information Management from Upper Iowa University and an Associate of Applied Science in Computer Systems Networking from Texas State Technical College in Waco. Marc has been CISSP certified since 2009 and was previously CCNA, MCSE and CRISC certified.

Learn More

Unlock 7 days of free training

  • 1,400+ hands-on courses and labs
  • Certification practice exams
  • Skill assessments
Start a Free Trial

Associated NICE Work Roles

All Infosec training maps directly to the NICE Workforce Framework for Cybersecurity to guide you from beginner to expert across 52 Work Roles.

  • All-Source Analyst
  • Mission Assessment Specialist
  • Exploitation Analyst

Plans & pricing

Infosec Skills Personal

$299 / year

Buy Now 7-Day Free Trial
  • 190+ role-guided learning paths (e.g., Ethical Hacking, Threat Hunting)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Custom certification practice exams (e.g., CISSP, Security+)
  • Skill assessments
  • Infosec peer community support

Infosec Skills Teams

$799 per license / year

Book a Meeting
  • Team administration and reporting
  • Dedicated client success manager
  • Single sign-on (SSO)
    Easily authenticate and manage your learners by connecting to any identity provider that supports the SAML 2.0 standard.
  • Integrations via API
    Retrieve training performance and engagement metrics and integrate learner data into your existing LMS or HRS.
  • 190+ role-guided learning paths and assessments (e.g., Incident Response)
  • 100s of hands-on labs in cloud-hosted cyber ranges
  • Create and assign custom learning paths
  • Custom certification practice exams (e.g., CISSP, CISA)
  • Optional upgrade: Guarantee team certification with live boot camps

Award-winning training you can trust