{"id":10640,"date":"2022-08-12T15:07:58","date_gmt":"2022-08-12T13:07:58","guid":{"rendered":"https:\/\/kappadata.fr\/?page_id=10640"},"modified":"2025-02-03T12:37:56","modified_gmt":"2025-02-03T11:37:56","slug":"threat-hunting","status":"publish","type":"page","link":"https:\/\/kappadata.fr\/en\/solutions\/hot-topics\/threat-hunting\/","title":{"rendered":"Threat Hunting"},"content":{"rendered":"

[vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” css=”.vc_custom_1610556427925{background-image: url(https:\/\/kappadata.fr\/wp-content\/uploads\/2020\/10\/Kappa-Data-Header-2.jpg?id=1191) !important;}” z_index=””][vc_column][qode_elements_holder number_of_columns=”one_column”][qode_elements_holder_item advanced_animations=”no” item_padding=”5% 10% 10% 10%”][vc_column_text]<\/p>\n

Threat Hunting<\/h1>\n

[\/vc_column_text][vc_column_text]<\/p>\n

When an AI-based antivirus is no longer sufficient…<\/span><\/h3>\n

[\/vc_column_text][vc_empty_space height=”80px” el_class=”onlyphone”][\/qode_elements_holder_item][\/qode_elements_holder][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”grid” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” z_index=”” background_color=”#f3f3f3″ padding_top=”20″][vc_column css=”.vc_custom_1604415412261{margin-top: -100px !important;}”][qode_elements_holder number_of_columns=”one_column”][qode_elements_holder_item horizontal_alignment=”left” advanced_animations=”no” custom_class=”cardstatic” background_color=”#ffffff” item_padding=”5% 10% 5% 10%”][vc_empty_space height=”20px”][vc_column_text]<\/p>\n

Threat Hunting?<\/h2>\n

[\/vc_column_text][vc_column_text]Fortunately, at the time of writing, we cannot yet speak of war in our country. Or can we? That depends on your definition of “war.” Even within our region, companies are under constant attack. Hackers from all over the world have free access to not only our public IP addresses<\/strong>, but they can also send mail to any of us. You don’t even have to distinguish between personal or business related mails.<\/p>\n

The intention of these hackers is usually to make money, but sometimes there is also a political motive behind it. It is very difficult to find this out, let alone prove it. The type of company and the consequences can raise some suspicions though.<\/p>\n

Regardless of what they have in mind, the consequences are rarely minuscule.\u00a0\u00a0<\/strong><\/p>\n

That is why we have all kinds of shields set up such as firewalls, email security and endpoint protection<\/strong>. The weakness of humans is exploited to gain themselves an access to the computer – with the network connected to it – through a backdoor. If you can’t count on the alertness of that user, how can you count on him or her to report his or her mis-click?<\/p>\n

What we are looking for is a kind of camera system that detects and records every movement in the network. By making correlations between different actions, suspicious patterns can be recognized.<\/p>\n

Something more technical…\u00a0<\/strong><\/em><\/p>\n

Mitre Att@ck<\/strong> is an American organization that closely monitors and maps the actions of hackers. An attack technique is a combination of various – in itself seemingly harmless – commands, most of which are also used by sysadmins.<\/p>\n

Before encrypting an entire network, hackers search their way around a network, map out where the backups are, which servers are important and so on. Between the initial contact and the effective encryption, days, weeks and sometimes months go by. The key is to detect the hacker before the encryption happens but also before he had a chance to upload data.[\/vc_column_text][vc_empty_space height=”28px”][vc_column_text]<\/p>\n

EDR \/ XDR<\/h4>\n

The detection of these techniques, usually takes place in an EDR<\/strong> or XDR<\/strong> product. (Endpoint\/eXtended Detection and Response) This piece of software that is sometimes an extension of an existing endpoint protection or sometimes an entirely separate product, acts as a kind of probe that stores every activity in an on-computer<\/strong> and\/or cloud based database<\/strong>. The latter is usually called datalake. Depending on the product, you can immediately and automatically<\/strong> assign actions to certain triggers or you can program queries to generate alarms.<\/p>\n

When comparing these products you will see that some AI based endpoint protection software<\/strong> can block multiple actions even before EDR has had to catch them. When we talk about the term XDR, we see that the interpretation can also be different.[\/vc_column_text][vc_column_text]<\/p>\n

Managed EDR<\/h4>\n

Suppose the system makes a detection that is almost certainly related to the presence of a hacker, then the desire is to remove this hacker from the network<\/strong>. The EDR tools will block the activity whether or not the hacker logs off, however, that does not guarantee that the hacker has not already installed loopholes. The hacker might have realized he was caught and accelerated the encryption process. Consequently, quick action<\/strong> in defense is appropriate. It is not obvious for everyone to free up the necessary resources at any time of the day or on weekends.<\/p>\n

The technical teams of the involved vendors are trained for this and are ready 24×7 to carry out the effective countermeasures. We speak here of MDR, Guard<\/strong> or whatever the vendor wishes to use as a name for the service.[\/vc_column_text][vc_column_text]<\/p>\n

WithSecure<\/h4>\n

WithSecure\u2122 EDR is a module of the WithSecure\u2122 Elements cybersecurity platform. This cloud platform offers effective protection against ransomware and advanced attacks. Elements brings together vulnerability management, automated patch management, dynamic threat intelligence and continuous behavioural analysis. You can use one or more solutions to achieve maximum protection. Benefit from expert advice on best practice responses, with the ability to automate remedial measures around the clock.[\/vc_column_text][\/qode_elements_holder_item][\/qode_elements_holder][vc_empty_space height=”25px”][vc_empty_space height=”75px”][\/vc_column][\/vc_row][vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”grid” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” z_index=”” padding_top=”50″ padding_bottom=”20″][vc_column][vc_column_text]<\/p>\n

Onze partners<\/h3>\n

[\/vc_column_text]

\n
\n \n
\n \n \n \n \n
\n\n
\n
\n
\n
\n\n \n <\/a>\n \n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <\/a>\n \n
<\/div>\n
\n \n\"\"<\/span> <\/div>\n <\/div>\n\n \n \n<\/article>\n
\n \n \n \n \n
\n\n
\n
\n
\n
\n\n \n <\/a>\n \n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <\/a>\n \n
<\/div>\n
\n \n\"\"<\/span> <\/div>\n <\/div>\n\n \n \n<\/article>\n
\n \n \n \n \n
\n\n
\n
\n
\n
\n\n \n <\/a>\n \n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <\/a>\n \n
<\/div>\n
\n \n\"\"<\/span> <\/div>\n <\/div>\n\n \n \n<\/article>\n
\n \n \n \n \n
\n\n
\n
\n
\n
\n\n \n <\/a>\n \n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <\/a>\n \n
<\/div>\n
\n \n\"\"<\/span> <\/div>\n <\/div>\n\n \n \n<\/article>\n
\n \n \n \n \n
\n\n
\n
\n
\n
\n\n \n <\/a>\n \n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n <\/a>\n \n
<\/div>\n
\n \n\"\"<\/span> <\/div>\n <\/div>\n\n \n \n<\/article>\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n
<\/div>\n <\/div>\n\n
Show more<\/a><\/span><\/div>\n
Loading...<\/a><\/div>\n\n \n <\/div>[\/vc_column][\/vc_row]<\/p>\n<\/div>","protected":false},"excerpt":{"rendered":"

[vc_row css_animation=”” row_type=”row” use_row_as_full_screen_section=”no” type=”full_width” angled_section=”no” text_align=”left” background_image_as_pattern=”without_pattern” css=”.vc_custom_1610556427925{background-image: url(https:\/\/kappadata.fr\/wp-content\/uploads\/2020\/10\/Kappa-Data-Header-2.jpg?id=1191) !important;}” z_index=””][vc_column][qode_elements_holder number_of_columns=”one_column”][qode_elements_holder_item advanced_animations=”no” item_padding=”5% 10% 10% 10%”][vc_column_text] Threat Hunting [\/vc_column_text][vc_column_text] When an AI-based antivirus is no longer sufficient… [\/vc_column_text][vc_empty_space…<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":9867,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"full_width.php","meta":{"_acf_changed":false,"footnotes":""},"class_list":["post-10640","page","type-page","status-publish","hentry"],"acf":[],"yoast_head":"\nDetecting threats with Kappa Data<\/title>\n<meta name=\"description\" content=\"At Exer, we put everything in place to help you detect threats.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/kappadata.fr\/en\/solutions\/hot-topics\/threat-hunting\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Detecting threats with Kappa Data\" \/>\n<meta property=\"og:description\" content=\"At Exer, we put everything in place to help you detect threats.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/kappadata.fr\/en\/solutions\/hot-topics\/threat-hunting\/\" \/>\n<meta property=\"og:site_name\" content=\"Kappa Data\" \/>\n<meta property=\"article:modified_time\" content=\"2025-02-03T11:37:56+00:00\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/kappadata.fr\\\/en\\\/solutions\\\/hot-topics\\\/threat-hunting\\\/\",\"url\":\"https:\\\/\\\/kappadata.fr\\\/en\\\/solutions\\\/hot-topics\\\/threat-hunting\\\/\",\"name\":\"Detecting threats with Kappa Data\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/kappadata.fr\\\/#website\"},\"datePublished\":\"2022-08-12T13:07:58+00:00\",\"dateModified\":\"2025-02-03T11:37:56+00:00\",\"description\":\"At Exer, we put everything in place to help you detect threats.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/kappadata.fr\\\/en\\\/solutions\\\/hot-topics\\\/threat-hunting\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/kappadata.fr\\\/en\\\/solutions\\\/hot-topics\\\/threat-hunting\\\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/kappadata.fr\\\/en\\\/solutions\\\/hot-topics\\\/threat-hunting\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/kappadata.fr\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"IT solutions\",\"item\":\"https:\\\/\\\/kappadata.fr\\\/en\\\/solutions\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Hot Topics\",\"item\":\"https:\\\/\\\/kappadata.fr\\\/en\\\/solutions\\\/hot-topics\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Threat Hunting\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/kappadata.fr\\\/#website\",\"url\":\"https:\\\/\\\/kappadata.fr\\\/\",\"name\":\"Kappa Data\",\"description\":\"Distributeur \u00e0 valeur ajout\u00e9e S\u00e9curit\u00e9 et R\u00e9seau\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/kappadata.fr\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Detecting threats with Kappa Data","description":"At Exer, we put everything in place to help you detect threats.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/kappadata.fr\/en\/solutions\/hot-topics\/threat-hunting\/","og_locale":"en_US","og_type":"article","og_title":"Detecting threats with Kappa Data","og_description":"At Exer, we put everything in place to help you detect threats.","og_url":"https:\/\/kappadata.fr\/en\/solutions\/hot-topics\/threat-hunting\/","og_site_name":"Kappa Data","article_modified_time":"2025-02-03T11:37:56+00:00","twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/kappadata.fr\/en\/solutions\/hot-topics\/threat-hunting\/","url":"https:\/\/kappadata.fr\/en\/solutions\/hot-topics\/threat-hunting\/","name":"Detecting threats with Kappa Data","isPartOf":{"@id":"https:\/\/kappadata.fr\/#website"},"datePublished":"2022-08-12T13:07:58+00:00","dateModified":"2025-02-03T11:37:56+00:00","description":"At Exer, we put everything in place to help you detect threats.","breadcrumb":{"@id":"https:\/\/kappadata.fr\/en\/solutions\/hot-topics\/threat-hunting\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/kappadata.fr\/en\/solutions\/hot-topics\/threat-hunting\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/kappadata.fr\/en\/solutions\/hot-topics\/threat-hunting\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/kappadata.fr\/en\/"},{"@type":"ListItem","position":2,"name":"IT solutions","item":"https:\/\/kappadata.fr\/en\/solutions\/"},{"@type":"ListItem","position":3,"name":"Hot Topics","item":"https:\/\/kappadata.fr\/en\/solutions\/hot-topics\/"},{"@type":"ListItem","position":4,"name":"Threat Hunting"}]},{"@type":"WebSite","@id":"https:\/\/kappadata.fr\/#website","url":"https:\/\/kappadata.fr\/","name":"Kappa Data","description":"Distributeur \u00e0 valeur ajout\u00e9e S\u00e9curit\u00e9 et R\u00e9seau","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/kappadata.fr\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"}]}},"_links":{"self":[{"href":"https:\/\/kappadata.fr\/en\/wp-json\/wp\/v2\/pages\/10640","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kappadata.fr\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/kappadata.fr\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/kappadata.fr\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kappadata.fr\/en\/wp-json\/wp\/v2\/comments?post=10640"}],"version-history":[{"count":9,"href":"https:\/\/kappadata.fr\/en\/wp-json\/wp\/v2\/pages\/10640\/revisions"}],"predecessor-version":[{"id":15052,"href":"https:\/\/kappadata.fr\/en\/wp-json\/wp\/v2\/pages\/10640\/revisions\/15052"}],"up":[{"embeddable":true,"href":"https:\/\/kappadata.fr\/en\/wp-json\/wp\/v2\/pages\/9867"}],"wp:attachment":[{"href":"https:\/\/kappadata.fr\/en\/wp-json\/wp\/v2\/media?parent=10640"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}