Threat Hunting

Hypothesis-driven hunting at enterprise scale

A focused course on proactive defense. Sqrrl HMM, hunt methodology (hypothesis → data sources → query → tune), stack ranking, frequency analysis, hunting LOLBAS abuse, beaconing, supply chain compromise. Velociraptor + Splunk + Sentinel hunting workflows. Recommended after AYSEC-102.

Lessons

• Threat Hunting Fundamentals
• Data Sources for Hunting
• Hunt Techniques
• Detection Writing & Promotion
• Identity Hunts
• Cloud Hunts
• Hunt Automation
• Capstone: Quarterly Hunt Program