What is a Threat Hunting Workshop?

The Cisco Threat Hunting Workshop evolved from a need to demonstrate the power of Cisco Threat Response. Originally, it began with just the demo data in the Cisco AMP portal, but, over time, it evolved to include many more products. It includes hands-on with

  • XDR
  • Cisco Secure Endpoint
  • Cisco Email Threat Defense
  • Cisco Secure Cloud Analytics

while also getting enrichment from

  • Cisco Talos
  • Cisco Umbrella
  • Cisco Duo
  • Third-party intelligence sources.

The Threat Hunting Workshop. Here, you'll take the skills you've built learning Cisco tools and techniques, and compete with other people in your class to see who can protect their network and clear out the threat actor's artifacts the fastest. This hands-on, in-person workshop will let you play both attacker and defender, and see the effects and artifacts in real-time.