Threat Hunting Workshop 19: Hunting for Discovery – Level 2

Discovery is where adversaries turn a foothold into a map, enumerating systems, accounts, and permissions to identify what's valuable and how to move deeper. This Level 2 workshop, led by Lee Archinal, Principal Threat Hunt Account Manager at Intel 471, is designed to make you a stronger threat hunter through a fully interactive, hands-on experience.

What to Expect

Designed for threat hunters looking to deepen their skills, this session will have you following along every step of the way, working through real discovery scenarios using real data we provide.

What You'll Do

Analyze system and network enumeration activity, account and permission queries, and adversary tooling to identify how attackers mapped the environment, what they were looking for, and what it enabled next, all guided by threat intelligence to connect findings to adversary intent.

What You'll Walk Away With

• A repeatable framework for hunting Discovery behaviors in production environments
• Hands-on experience that directly strengthens your skills as a threat hunter
• Access to supporting reference materials after the session
• The opportunity to earn your "Threat Hunting - Hunting for Discovery (Level 2)" badge by completing a final challenge after the workshop

Looking to brush up on the fundamentals? The Level 1 Discovery Workshop is available as an optional resource.

This is your opportunity to sharpen your investigative skills alongside an expert and leave better prepared to detect and respond to one of the most consequential phases of an intrusion.