What is Enterprise Detection & Response: A Simple Hunting Maturity Model
Receive important notifications and updates related to North American electric grid security.
An Accessible Overview of the Hunting Maturity Model
A Simple Hunting Maturity Model UPDATE 2015-10-15: I received several questions regarding the roles of automation in HMM0 and HMM4. I have addressed these inquiries in a new section. Additionally, I have named the levels to make them easier to reference.
It's been conference season for me lately, and I've gained valuable insights
In the past few months, I've attended several conferences, many of which featured sessions on "hunting." Since this is a research interest of mine, I made it a point to attend all the relevant sessions that fit into my schedule. These presentations have provided me with some excellent ideas, and I've started to notice recurring themes in the material being presented. Additionally, I've spoken with several attendees who expressed a common concern: "We want to hunt, but how do we determine where to begin?" Recently, I had the chance to discuss with my colleagues the typical activities undertaken by a security team and how these relate to hunting. Drawing from the presentations I've attended and the discussions I've had, I was able to make some general observations about the varying levels of capability within the hunting organizations I have encountered.
Exploring a Conceptual Maturity Model
What started as simple bullet points on a whiteboard sparked an interesting conversation. A colleague mentioned something along the lines of "That's kind of like a maturity model," which prompted me to reflect. I realized that I had never encountered anything quite like that before, but I found the idea to be quite intriguing.
Enterprise Detection & Response: A Simple Hunting Maturity Model Reviews
No reviews yet.
