2020-006-Roberto Rodriguez, threat intel, threat hunting, hunter's forge, mordor setup

<p><span style="font-weight: 400;">Full notes and graphics are on <a href= "http://www.brakeingsecurity.com">www.brakeingsecurity.com</a></span></p> <p><span style="font-weight: 400;">Episode 2020-006</span></p> <p><span style="font-weight: 400;">Book club</span></p> <p><span style="font-weight: 400;">“And maybe blurb for the cast could go something like this. Book club is starting up again with Hands-On AWS penetration testing with Kali Linux from Gilbert and Caudill. You read and get together to discuss or demo every Monday. Get the book, start reading and meet us for the kick off Monday the 24 at 10pm eastern. The book club meets virtually on zoom, and organizes on slack..get invited like this.”</span></p> <p> </p> <p><span style="font-weight: 400;">Book: https://smile.amazon.com/Hands-Penetration-Testing-Kali-Linux/dp/1789136725</span></p> <p> </p> <p><span style="font-weight: 400;">NolaCon Training:</span></p> <p><a href= "https://nolacon.com/training/2020/security-detect-and-defense-ttx"> <span style= "font-weight: 400;">https://nolacon.com/training/2020/security-detect-and-defense-ttx</span></a></p> <p><br /> <br /> <br /></p> <p><span style="font-weight: 400;">Roberto Rodriguez </span></p> <p> </p> <p><span style="font-weight: 400;">Bio</span></p> <p><span style="font-weight: 400;">@Cyb3rWard0g on Twitter</span></p> <p><br /> <br /> <br /> <br /></p> <p><span style="font-weight: 400;">Threat Intel vs. Threat Hunting = what’s the difference?</span></p> <p> </p> <p><span style="font-weight: 400;">What datasets are you using? </span></p> <p> </p> <p><span style="font-weight: 400;">Did you start with any particular dataset, or created your own?</span></p> <p> </p> <p><span style="font-weight: 400;">Technique development - what skills are needed?</span></p> <p><span style="font-weight: 400;">   </span> <span style="font-weight: 400;">C2 setup</span></p> <p><span style="font-weight: 400;">   </span> <span style="font-weight: 400;">Detection mechanisms</span></p> <p><span style="font-weight: 400;">   </span> <sp