
Threat Hunting Case Study: The Gentlemen
Analyzing The Gentlemen ransomware group's attack chain and how to hunt for their privileged group manipulation technique before they spread through the NETLOGON share folder on Windows domain controllers.

A lot has been said about threat hunting, by a lot of people. They'll tell you how difficult it is, what products you should use, how to automate the pain away, and how you should've been doing this all along. But here's the thing...you have been doing it all along.
Watch the recording of the
Black Hat
Webcast Series below to listen to our speakers as they present the need to know information on practical threat hunting.
Key takeaways:
video-embedTo watch more webcasts with Cyborg, check out our Threat Hunting Virtual Launch Event, focusing on threat intelligence and cyber threat emulation.

Analyzing The Gentlemen ransomware group's attack chain and how to hunt for their privileged group manipulation technique before they spread through the NETLOGON share folder on Windows domain controllers.

Scattered Spider skips malware and breaks in with a phone call and a legitimate remote access tool, here's how to hunt for it.

FileFix bypasses Mark of the Web (MotW) protections by hijacking the Windows File Explorer address bar. Here is how to hunt for it.