NetWitness Platform Introduction to Hunting

[ElynnKoh]

Summary

This course covers how to use the NetWitness  Platform including Logs, Packets and Advanced Endpoint, to find threats in the environment using a recommended methodology. 

Audience

Anyone interested in hunting with the NetWitness Platform

Duration 2 days

Prerequisites Knowledge/Skills

Introduction to the NetWitness Platform 
NetWitness Platform Foundations 
NetWitness Platform Analysis 

$2,310 USD ⁓ 2,000 Training Credits

Delivery Types:

This course is delivered in 2 Modalities:

• Virtual - Instructor Led Training (VILT)  v12.4
• On-Demand Classroom (ODC) v11.7

11.712.4 ^NEW!

Course Overview:

This course provides an overview of threat hunting and covers hunting tools, content, and methodologies that can be used to proactively find suspicious behavior. Participants will apply the techniques acquired in this course to identify anomalies and find threats in the environment using a recommended methodology, using the NetWitness Platform, including logs, packets, and Endpoint agents. 

---

 NetWitness Platform Introduction to Hunting version 12.4

Access Training
for Customers/Partners

Access Training
for NetWitness Employees

Course Objective

Upon completion of this training, the learner should be able to:

• Describe threat hunting  
• Describe the NetWitness Hunting Pack 
• Describe the hunting methodology and techniques 
• Describe the MITRE’s ATT&CK™ frameworks 
• Describe NetWitness Hunting Cards 
• Describe the basics of hunting with NetWitness UEBA and Endpoint 
• Explain the relationship between protocols and anomalies 
• Explore selected protocols and services anomalies 
• Describe a Security Incident Report 
• Identify threats using the Hunting content, tools, and methodology 

Version Highlights:

• Expanding real-world use cases to improve hands-on experience with recent threats, such as Log4Shell and APT-Zerologon
• Covering high-impact, current threats to build skills in identifying and mitigating live attacks
• Presenting the latest product integration with the MITRE ATT&CK Framework to support proactive defense against advanced adversary tactics
• Enhancing knowledge retention with assessments to reinforce concepts and test understanding

Course Outline

Module 1: Threat Hunting Concepts 
Module 2: Hunting with NetWitness 
Module 3: Hunting Anomalies 

Module 4: Hunting and Documenting Threats

---

NetWitness Platform Platform Introduction to Hunting version 11.7

Access Training
for Customers/PartnersAccess Training
for NetWitness Employees

Course Objective

Upon completion of this training, the learner should be able to: 

• Describe threat hunting and incident response roles 
• Describe the Hunting Guide 
• Describe the hunting methodology 
• Describe the Hunting Pack meta  
• Describe the UEBA Essentials Content Pack 
• Describe the UEBA Essentials Hunting Guide 
• Understand the MITRE’s ATT&CK ™ frameworks  
• Describe NetWitness Hunting Cards 
• Describe the basics of hunting with NetWitness Endpoint  
• Describe NetWitness Platform hunting tools 
• Identify protocol/service anomalies 
• Identify indicators of malicious traffic 
• Use hunting techniques, methodology and tools to detect threats 
• Respond to incidents 
• Report findings 

Course Outline

Module 1: Hunting Techniques and Methodology 
Module 2: Finding Anomalies 
Module 3: Documenting Threats

If you have any questions, please contact your account manager or Contact Us directly!

Go to top ⬆

Additional resources

• Upcoming Public classes Calendar
• View Course Catalog
• Enterprise Training 

If you have any questions, please contact your account manager or Contact Us directly!

Go to top ⬆