Scenario B – external threat hunt
A new threat hunting team, Cyber Sleuths International, was making waves across the cyber defense community. What started out as a four-person organization with nothing more than a few laptops and good ideas steadily grew into a mature organization that provided cyber defense services around the globe. This leap from backroom researching to boardroom briefings took a lot of effort, planning, and a solid foundational understanding of how to conduct threat hunts.
On this particular occasion, Cyber Sleuths International was contacted by a privately owned organization employing around 10,000 individuals. Over the past 12 months, they had been having an increasing array of issues cropping up throughout their business. It all started after the previous year's leadership summit, during which all of the department leads traveled to a resort for a week to plan out the upcoming year's goals and objectives. One of the members on the retreat...
