Threat Hunting: Execution – Level 1

Issued by Intel 471

Intel 471's Threat Hunting - Execution (Level 1) badge certifies that the member has successfully completed all the necessary coursework, and has successfully completed the final validation exercise at the end of the event. The Execution (Level I) credential covers the following topics of execution used by adversaries, and how to use that knowledge to hunt for it, including: Command and Scripting Interpreter, System Services: Service Execution, User Execution: Malicious File.

Type Certification
Level Foundational
Time Hours
Cost Free

Additional Details

Skills

Earning Criteria

To successfully claim your Execution (Level 1) credential, you must first complete Intel 471's Threat Hunting Workshop: Hunting for Execution. This hour long workshop introduces individuals to the key elements of execution, how it works work, and why adversaries use it.

Standards

Final Challenge

Once you have completed the workshop component of the assessment, you will be presented with a final validation challenge that will put your knowledge of adversarial execution to the test. Successfully recover the flag proving you have mastered hunting for basic execution.