Incident detection and response

- [Narrator] To facilitate incident detection and response,…it's important to be actively looking…for incidents in your network.…There are three major ways to systematize your efforts…and detect new incidents, utilizing hunt teams,…selecting the correct analysis techniques,…and establishing a log and event review system.…In a previous lesson we talked about…the blue team and the red team,…but what exactly is a hunt team?…Well a hunt team is a group of cybersecurity professionals…who focus on finding an adversary…who's already on your network,…whether you know they're there or not.…

The hunt team works under…the security operations center in the organization.…They search through event and log files…to determine where a malicious actor…could be hiding inside your network.…The hunt team works to identify any internal…or external violations of your network security policy,…as well as violations of your privacy policy.…They are also responsible for locating insider threats,…which are extremely challenging since…the user has the authorize credentials already in place.…