AUSCERT2025 - Advanced Threat Hunting in the Cloud by Pouya Ghotbi

Описание: AUSCERT2025 - Advanced Threat Hunting in the Cloud: Building and Using Custom Detection Frameworks by Pouya Ghotbi

Proactive threat hunting is essential for identifying sophisticated attacks that evade traditional detection in dynamic cloud environments. This session focuses on building custom threat hunting frameworks to uncover hidden threats and minimize attacker dwell time. Attendees will learn hypothesis-driven techniques to analyse cloud-native telemetry, detect unusual behaviours, and integrate threat intelligence for deeper insights. The session also explores automating hunting workflows to enhance scalability and effectiveness. Through real-world examples and actionable strategies, participants will gain the skills to proactively defend their multi-cloud environments, refine detection capabilities, and stay ahead of evolving threats.