[Security] Building and Operating a Threat Hunting System Using Wazuh+ELK (SIEM) (Basic)

🎯 Why is it important to understand threat hunting? 🎯

🔍 What is “Threat Hunting”?

Threat hunting is a proactive security approach that, unlike traditional reactive security control, proactively identifies and analyzes security threats to respond before an attack. This refers to the work of security experts constantly monitoring systems to identify threats that were not detected beforehand.

💡 Why is threat hunting important?

Cyber attacks are becoming more sophisticated by the day. It is becoming difficult to respond to these sophisticated attacks with traditional security solutions alone. This is why security professionals need to be more proactive in finding, analyzing, and responding to threats. Threat hunting is the best methodology to meet this need.

🔐 Wazuh & ELK - Invitation to a new world of security!

• Learn how to integrate and utilize Wazuh with sysmon, suricata, virustotal, etc.

Wazuh and ELK are tools that can perform this threat hunting process more efficiently, and have become essential tools for threat hunting experts. Through this lecture, you will learn how to use Wazuh and ELK, and acquire proactive security response capabilities.

🚨 So how is it different from general security control?

General security control is mainly about detecting and responding to known threats, but threat hunting requires the ability to discover and respond to new, unknown threats. This means security control that goes beyond simply blocking attacks, but also identifies the cause and root of the attack and prevents it in advance.

✨ Are you ready to take your security capabilities to the next level?

This course is perfect for taking that first step. We invite you to the world of threat hunting using Wazuh and ELK! Register for the course now and start your journey to becoming a security expert! 🌟🛡️🚀

Practice-oriented lectures!

We'll help you follow the class!

• Provides snapshot virtual images for each chapter (using Naver Drive)

• For inquiries, please feel free to contact Inflearn and DISCORD's 'Inflearn_Class_Threat Hunting' channel or DM 'Zero Mini'

• Discord Channel: https://discord.gg/uCQEnRaSMG

  

  
  

To be continued in the future
Threat Hunting Series

You will learn how to improve the threat hunting system in large-scale infrastructure environments by utilizing Ansible and other tools, and sequentially learn threat hunting methods that reflect recent issues such as detailed rule sets and new malware.