Introduction to Defining TTPs From Incident Data

This analytics workshop is for those who are curious about or need a refresher on how to derive the use of tactics, procedures and techniques from within incident data. To get the most out of this workshop, you should feel comfortable with basic analysis and hunting methods. The workshop will provide a the random assortment of information that represents data from an incident. You are then taken through a series of steps to analyze the information to look for artifacts, patterns and hints that enable you to build and confidence rate techniques, procedures and tactics to better under the process flow of the adversary during the incident

Presented by