• A
  • C
  • D
  • E
  • F
  • H
  • I
  • K
  • M
  • P
  • R
  • S
  • T
  • W
  1. Huntbook by Predefender > 
  2. Tags

Tags

A

  • Analysis (1)

C

  • Cheatsheet (6)
  • Context (1)

D

  • Definition (1)

E

  • Events (1)

F

  • Foundation (1)
  • Framework (10)
  • Fundamentals (9)

H

  • Hypothesis (2)

I

  • Incident Response (2)
  • Introduction (1)

K

  • Kusto (1)

M

  • Methodology (3)
  • Microsoft (4)
  • Mindset (2)

P

  • Persona (1)
  • Planning (1)
  • Ports (1)
  • Powershell (1)
  • Program (1)
  • Protocols (1)

R

  • Registry (1)

S

  • Services (2)
  • SOC (2)
  • Sysmon (1)

T

  • Tables (1)
  • Telemetry (1)
  • Thinking (1)
  • Threat Hunting (9)

W

  • Windows (3)
  • Home

  • Fundamentals
    • 1. - Basics
      • Definition
      • Hierarchy of Needs
      • Analyst Mindset
      • The Threat Hunter Persona
      • From Alerts to Hypotheses
      • Context Before Conclusion
      • How to Start a Threat Hunting Program
      • Planning a Threat Hunt
      • Creating Hypotheses
      • When to Engage Threat Hunters
    • 2. - Frameworks
      • Diamond Model
      • Lockheed Martin Kill Chain
      • Unified Kill Chain
      • MITRE ATT&CK
      • OODA Loop
      • Pyramid of Pain
      • Threat Hunting Frameworks
        • PEAK
        • TaHiTI
        • Magma
    • 3. - Methodology
      • Anomaly Driven
      • Intelligence Driven
      • Hypothesis Driven
    • 4. - Deliveries
      • Process Documentation
        • Runbook
        • Playbook
        • SOP
      • SITREP
      • No Result Hunts
  • Lab
    • Setting Up a Basic Lab
    • Setting Up a Complete Lab
    • API Bulk Ingesting Logs
    • Ingesting Windows Logs
    • Ingesting with Filebeat
  • Techniques
    • Understanding Data
    • Establishing Timeline
  • Tips and tricks
    • Intelligence Resources
    • MITRE ATT&CK Field Notes
      • T1105 - Ingress Tool Transfer
      • T1566 - Phishing
    • SIEM Query Languages
    • Windows Logins
    • MAC Addresses
  • Cheat Sheets
    • IP Protocol Numbers
    • Kusto Sentinel Tables
    • Network Services
    • PowerShell
    • Sysmon
    • Windows Registry
  • Detection Engineering
    • Hunter to Detection
  • About
    • About
    • FAQ
    • Contact

  •  
  •  
  •  
RSS Feed

Copyright Roger Johnsen

All rights reserved.