Copilotfree, in-browser
Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Ask me anything about your lessons or your code.
“What is a port?” · “Why is my code erroring?”
Your alerts fire on what someone already knew to look for. Hunting is the search for everything they didn't.
The Hunting Mindset
Your alerts fire on what someone already knew to look for. Hunting is the search for everything they didn't.
Hypothesis-Driven Hunting
A good hunt is a falsifiable bet, not a vibe. Write the claim down before you touch a log.
Hunting in Logs
Three log sources catch most intrusions. Learn what each one hides and where the attacker slips.
Indicators vs Behaviors
A hash is trivial to change. The thing the malware has to do is not. Hunt the thing it has to do.
Documenting a Hunt
An undocumented hunt you finished is a hunt someone else has to run again from scratch.