Threat Hunting with Firewalls

Firewall logs are a critical source of data for monitoring network traffic and analyzing security incidents. During threat hunting, firewall logs are used to detect potential threats, identify anomalies, and respond to security incidents quickly and effectively. This course covers the role and importance of firewall logs in the threat hunting process.

1. 1Lessons5 lessons

   1. 1.1IntroductionPreview5 min
   2. 1.2Information from Firewall Logs for Threat Hunting5 min
   3. 1.3Threat Hunting Steps with Firewall Logs5 min
   4. 1.4Outbound Connection Hypothesis5 min
   5. 1.5Practical Lab5 min