Threat Hunting & Compromise Assessment

Description

TH & CA Area Network & Endpoint
Area Network
• Instalasi deployment tools seperti Arkime, Suricata dan Zeek.
• Integrasi dan Korelasi dengan Threat Intelligence Platform.
• Hunting via Network melalui Indicators of attack (IOA) / Indicator of Compromise (IOC) terhadap
kemungkinan callback atau Lateral Movement.
Area Endpoint
• Instalasi deployment tools Velociraptor.
• Hunting TTPs melalui Query Hunt yang di eksekusi melalui velociraptor.
• Hunting TTPs melalui endpoint detection and response (EDR) (jika ada).
• Threat Intelligence Sweeping.
• Analisa serangan melalui SIEM.