December 1

Webinar takeaway – Getting Hired as a Threat Hunter

Security

0  comments

My key takeaways

  • Catch 22: I can't get hired until I have experience. I can't get experience until I get hired.
  • Threat hunting is only < 5 years old
  • Put out data and research to help others, if you want to lead
  • Check social media to learn about dress codes
  • Figure out the tools they are using by reviewing older job post on LinkedIn and Indeed
  • Know your story: you have 2-3 min to hook them
  • morning breakfast trick:
    • appointment at 9am for interview
    • on short notice switch to 8am in a coffee shop
    • be there 45min earlier
    • tipp the waitres to mess up the order of the interviewee
    • judge on his reaction
  • If you have an answer in an interview say "let be look that up for you" and give the answer in your follow up email

Env

additional links

User comments

  • kbuffN40 — heute um 20:12 Uhr Building a lab? Check out labgopher.com - parses ebay for good deals on servers.

  • ExtremePaperClip — heute um 20:15 Uhr One weird thing you WILL see in the Zeek logs of your home network: Google Chrome sending DNS requests to random strings of text (example: "sdilufvjksiou" "ctgwlkdjbfokdnkd")....... and that is normal.

Tags

hiring, jobhunting, threathunting

You may also like

Webinar takeaway – Applying The Threat Hunter’s Runbook

My key takeaways threat hunting runbook Identify connection persistency Identify if there is a business need Protocol analysis Investigate external IP address Investigate internal IP address Threat hunting is stealthy only when in IR mode, the adversary should be allowed to notice we are after him set the TCP timeout from 5min to 1h in

Read More

Webinar takeaway – The Ins and Outs of RITA

My key takeaways RITA is made to detect beacons and long connections open source tool Signature based detection of malicious code is outdated Average detect time is over 6 month > 50% of compromised systems are detected by outsiders RITA is behaviour based Needs a bunch of pakets to work on min 1h, default 24h

Read More
Leave a Comment