{"id":858,"date":"2024-08-24T05:21:05","date_gmt":"2024-08-24T05:21:05","guid":{"rendered":"https:\/\/hackmybox.com\/?p=858"},"modified":"2024-08-26T04:55:04","modified_gmt":"2024-08-26T04:55:04","slug":"introduction-to-threat-hunting","status":"publish","type":"post","link":"https:\/\/hackmybox.com\/index.php\/2024\/08\/24\/introduction-to-threat-hunting\/","title":{"rendered":"Introduction to Threat Hunting"},"content":{"rendered":"
<\/div><\/div><\/div><\/div><\/div><\/div><\/div>
<\/div>

First, let us establish the concept and meaning of IOC . An Indicator of Compromise(IOC) is a data point used in cybersecurity to identify signs of malicious activity. Examples include file hashes, IP addresses, domain names, registry keys, URLs, and email addresses associated with threats. IOCs help detect, analyze, and respond to security incidents by providing evidence of potential breaches or malicious behavior.<\/p>\n

In this lab by Security Blue, we will focus on file hashes in our threat hunting. File hashes are unique identifiers for files, such as MD5, SHA1, or SHA256, that can help identify known malicious files.<\/p><\/div><\/div>

1.The first step is to download and install the necessary tools from the link below:<\/p>\n

IOC Editor | FireEye Market<\/a><\/p>\n

FireEye Market<\/a><\/p><\/div><\/div>

2. The next step is to obtain the hash values from the provided files.<\/p><\/div><\/div>

\"\"<\/div><\/div>