The archive / 2019

talk

Exploring Tactical Threat Intel & The Dark Market Economy

Thursday, April 18, 2019 · Pivotal Labs, Toronto ·152 attended

The April 2019 meetup had two talks. Dhruv Majumdar presented on threat hunting with tactical threat intelligence. He covered intelligence report analysis, competing hypotheses, YARA rule development, the STIX framework and building a campaign heat map. Abhinab Chakraborty looked at how cybercriminals sell personal data on underground marketplaces, and how threat actors moved to other ways of communicating once law enforcement started cracking down on those marketplaces and hacking forums. His session was set up as an open discussion on collecting that intelligence.

Elevated Prompt, where Dhruv is the technical lead for threat hunting, sponsored the night.

Sources & references