Introduction

What?

SIEM and threat intelligence/hunting notes.

Why?

Worth keeping/remembering.

How?

• Incident prevention

• Threat intelligence lifecycle

• Pyramid of pain

• Cyber kill chain

• MITRE ATT&CK framework

• Unified kill chain

• Diamond model

• Incident handling (NIST)

• Standards of communication

• SIEM stack

• Threat hunting