In this workshop RiskIQ researchers build-out a full investigation starting from a single, known-malicious IOC and expand the hunt to find all related and similar infrastructure. Our experts then walk through RiskIQ's advanced data sets and how we can use them along with trackers like JARM to accurately expand the investigation to illuminate the attack surface of threat actors.
In this session, we'll also be hunting for SolarWinds Orion servers on the internet and review all of the ways to find them.