Insider Threat Hunting: Detecting and Responding to Internal Security Risks

Course details

In today's cybersecurity landscape, mitigating risk is crucial, and that starts with awareness of threats coming from those within the organization. In this specialized course, strategic cybersecurity leader Michael Wylie covers a critical topic: insider threat hunting. Insider threats encompass a range of malicious activities undertaken by individuals within an organization, who have inside information concerning the organization's security practices, data, and systems. Dive into the knowledge and skills that you need to identify, assess, and mitigate risks posed by insider threats within an organization. Learn how to build an insider threat hunting framework. Explore a variety of ways to hunt for and detect insider threat risks. Plus, find out how you can use AI to hunt for insider threats.

Concepts

0. Introduction

01 - Want to hunt for insider threats
02 - What is an insider threat
03 - Types of insider threats
04 - Why hunt for insider threats

1. Insider Threat Hunting Framework

05 - PRECEED framework for hunting insider threats
06 - Hunting for insider threat reconnaissance
07 - Hunting for insider threat pre-exfiltration evasion
08 - Hunting for insider threat data collection
09 - Hunting for insider threat data exfiltration
10 - Hunting for insider threat post-exfiltration evasion

2. Detecting and Hunting Insider Threats

11 - Hunting insider threats in email
12 - Hunting insider threats in cloud file storage
13 - User and entity behavior analytics (UEBA)
14 - Using AI to hunt for insider threats

Conclusion

15 - Next steps