Threat Hunting in Security Operation - SANS Threat Hunting Summit 2017

The Security Operations Center (SOC) is intended to be the nexus of protection for the organization. There are many things it must do. This talk will depict a model for security operations and the data flow of threat hunting within the SOC. This includes: inputs, outputs, staff members and technology necessary to accomplish the often misconstrued task of threat hunting.
Chris Crowley (@CCrowMontance), Principal Instructor, SANS Institute

[@CReesman]

Very informative video. My biggest takeaway was to take 1 hour a week to work on threat hunting at some level. Thanks!

[@lancemarchetti8673]

Thanks Chris, this was a great soc delivery 👍🏽

[@MrKensh]

I really enjoyed this video... thank you!

[@RafaelOliveira-vg8gq]

Another amazing video, its help a lot.
Thank you guys

[@jonathanmoore6446]

Thank you for this video. I plan on sharing with my team.

[@darnellmac9981]

Just looking to help companies save money. Another see something say something program. Is he suggesting to pay employees extra for scripts when they are not scripting but help desk.

[@mploi9759]

But he doesn't explain why the Easter bunny lays eggs @eastertime?

[@moretwocome21]

The audio is extremely bad!!!

[@MoSec9]

Mor2come21 You must have watched another video. Otherwise, check your equipment. The audio is actually “extremely” good.

[@CCrowMontance]

Sorry. I didn't think the audio was so bad. Are there parts that you didn't understand that I can elaborate on?

[@ejoviag6561]

Chris Crowley hi Chris, please could you share the link to resource mentioned in the video. Will be great to go through it.
Thanks

[@CCrowMontance]

@@ejoviag6561 - All my resources that are publicly available are here: www.mgt517.com/soc . Lots of slide decks and files to download!