Threat Hunting With YARA

Walkthrough summary

Threat Hunting With YARA TryHackMe walkthrough with 15 answered prompts and lab methodology notes.

Sample prompts covered

• What technique does ID T1134 describe?
  Open the walkthrough page to inspect the full answer and command flow.
• What does the detection rule M_APT_Dropper_Rootsaw_Obfuscated detect?
  Open the walkthrough page to inspect the full answer and command flow.
• Which threat hunting style is proactive and uses indicators of attack and TTPs?
  Open the walkthrough page to inspect the full answer and command flow.
• In which phase of the threat hunting process, tools like YARA or Volatility are used?
  Open the walkthrough page to inspect the full answer and command flow.
• You have received a threat intelligence report consisting only of Indicators of Compromise. What threat hunting style do you recommend to use?
  Open the walkthrough page to inspect the full answer and command flow.