Ügyfél: Kaspersky Labs GmbH
Formátum: Article
Méret: 2 MB
Nyelv: Angol
Dátum: 16.12.2025
IoC hunting in action: practical pivoting techniques
This article was written by Damir Shaykhelislamov, an employee working within Kaspersky’s Expert Security Solutions department. It explores the importance of IoC pivoting in modern threat hunting and demonstrates how to move from basic IoC detection to building a broader picture of nefarious activity.
The article includes real-world examples that will help analysts to enrich indicators and optimize workflows with threat intelligence, such as:
The article includes real-world examples that will help analysts to enrich indicators and optimize workflows with threat intelligence, such as:
- Infrastructure-based pivoting (e.g., IPs, domains, SSL certificates)
- Malware artifact discovery using sandboxing and code analysis
- Threat attribution and TTP mapping with frameworks such as MITRE ATT&CK
These, among other, techniques provide a structured approach to turn isolated indicators into actionable insights, so analysts can detect more, respond faster and get ahead of cyberthreats.
