While external threat intel feeds can be a solid source of information, when paired with internal indicators, it can be overwhelming to identify how and where to invest your time as an analyst. By following a structured, practical approach to investigations, you and your team can invest your time and resources where they matter most. Jackie Abrams of DomainTools will demonstrate repeatable investigative pathways and illustrate how to leverage available data to strengthen your security posture without breaking the bank, using real-world examples of DNS-based intelligence that exposed attack campaign infrastructure.
