Visão Geral

Este curso aborda o uso de Inteligência Artificial para apoiar Threat Hunting, incluindo geração de hipóteses, análise de indicadores, correlação de eventos, identificação de TTPs e criação de consultas.

Objetivo

Após realizar este curso, você será capaz de:

• Utilizar IA em Threat Hunting
• Gerar hipóteses de investigação
• Acelerar análise de evidências
• Criar consultas e detecções

Publico Alvo

• Threat Hunters
• SOC Analysts
• Detection Engineers
• Blue Team

Pre-Requisitos

• Conhecimentos de Threat Hunting
• Familiaridade com SIEM
• Conhecimentos de logs
• Familiaridade com MITRE ATT&CK
• Noções de IA Generativa

Conteúdo Programatico

Module 1: AI-Assisted Threat Hunting

1. AI and threat hunting
2. Generative AI capabilities
3. Hunt lifecycle
4. AI-assisted hypotheses
5. Human validation
6. Hunt prioritization
7. Investigation workflows
8. AI limitations
9. Secure AI usage
10. AI-assisted hunting methodology

Module 2: AI-Assisted Data Analysis

1. Log analysis
2. Event correlation
3. IOC analysis
4. Behavioral analysis
5. Anomaly identification
6. Pattern recognition
7. Timeline generation
8. Data enrichment
9. Investigation summarization
10. AI-assisted data analysis

Module 3: AI-Assisted Query Development

1. SIEM query generation
2. Query optimization
3. Search logic
4. Filtering
5. Event correlation
6. Detection logic
7. Query validation
8. False positive analysis
9. Query refinement
10. AI-assisted query engineering

Module 4: AI and MITRE ATT&CK

1. TTP identification
2. ATT&CK mapping
3. Technique-based hunting
4. Threat actor analysis
5. Adversary behavior
6. Hunt hypothesis generation
7. Data source mapping
8. Detection opportunities
9. ATT&CK coverage
10. AI-assisted ATT&CK hunting

Module 5: Advanced Threat Hunting with AI

1. Behavioral hunting
2. Multi-source correlation
3. Identity hunting
4. Endpoint hunting
5. Network hunting
6. Cloud hunting
7. Attack chain analysis
8. Threat intelligence integration
9. Detection engineering
10. Advanced AI-assisted hunting

Module 6: Practical AI-Assisted Hunting

1. Hunt hypothesis
2. Data collection
3. AI-assisted investigation
4. Query generation
5. IOC analysis
6. TTP mapping
7. Attack reconstruction
8. Detection development
9. Hunt reporting
10. AI-assisted threat hunting case study