The planning phase encompasses deciding which adversaries matter to your organization and mapping the techniques they use. This critical step is what makes a threat hunt relevant. It is also the phase most teams often skip because it is slow and research intensive. We built the APT TTP Mapper tool to turn an expertise-intensive process into an automated workflow.

One of the biggest challenges for a junior detection engineer is getting hands-on experience without access to an expensive cloud lab. In this guide, we walk through building a free local Splunk detection lab.