Threat Hunting Over the Network With Zeek and RITA

Simulating a Beacon

Version 6.0.0 of AC-Hunter Has Been Released!

AC-Hunter Whitelisting

Safelist Synchronization

Filtering Out High Volume Traffic

What Is This TCP or UDP Port

Filtering Netflow/IPFix

Upgrading to the New Default Whitelist

The Difference Between Watching Alerts and Threat Hunting

AC-Hunter v5.1 Is in the Wild!

Questions From a Beginner Threat Hunter