Hypotheses, telemetry, and human judgment: Inside Cisco Talos Threat Hunting

Hypotheses, telemetry, and human judgment: Inside Cisco Talos Threat Hunting Learn how Cisco Talos Threat Hunting uses hypothesis-driven methods and multi-domain telemetry correlation to find stealthy threats operating below automated detection thresholds. By Ron Scott-Adams Most security tools operate on a simple principle: If a known-bad pattern appears, fire an alert. This works well enough for many threats, but it fails against adversaries who closely stu…

https://blog.talosintelligence.com/hypotheses-telemetry-and-human-judgment-inside-cisco-talos-threat-hunting

sha256:e7902062dd7b1eb219bd56298130a339fbb82c00244494fa2dde769a84330b7f

• cve0
• md50
• url0
• ipv41
• ipv60
• sha10
• domain3
• sha2560
• malware_token0
• attack_pattern0
• threat_actor_token0