c-Watch 2020: Cyber Threat Hunting and Analysis Training

A three-week intensive on cyber threat analysis and cyber threat intelligence formulation. Students will gain foundational knowledge, tradecraft knowledge and hands-on experience with important leading edge tools for cyber threat hunting and analysis. The intensive is followed up with a one-week Capstone where students are given the opportunity to engage in a daily intelligence collection and analysis operation. Students that meet the participation and engagement requirements are then given the opportunity to join the CrowdWatch, a cadre’ of trained cyber threat analysts performing contract services to ISACs, ISAOs, government agencies and private companies.

Course Information

Estimated Time: Three weeks, plus a one-week capstone.

Difficulty: Intermediate

Categories: c-Watch

Tags: cybersecurity

Course Instructors

Jane Ginn Author

Nick Sturgeon Author

Stephen Campbell Author

Doug DePeppe Author

Kyle Kweder Author

Ben Baran Author

Christopher Robinson Author

Fundamentals of Cyber Threat Hunting

Protected: W1-D1: Course Overview

Protected: W1-D2: Introduction to Cyber Threat Hunting

Protected: W1-D3: Collaborative Workshop 1

Protected: W1-D4: Tools Training: MX Toolbox & URLscan.io

Protected: W1-D5: Tools Training: Kali Linux & GTI Overview

The Cyber Threat Analysis Ecosystem

Protected: W2-D1: Digital Forensics & Passive DNS Panel Discussion

Protected: W2-D2: Intelligence Analysis Frameworks

Today’s lesson is aimed at introducing the student to several concepts that have evolved to tell the story of how to hunt, what to look for, how to classify your findings, and finally how to communicate these findings to your stakeholders.