Play Jenga with the Adversary: Attacking Adversaries with Graph Theory by Matthew Winters

2025 BSides Tampa
Play Jenga with the Adversary: Attacking Adversaries with Graph Theory by Matthew Winters

Description
Threat Hunters constantly wrestle with the problem of too many options for work and few tools to narrow our focus. With Graph Theory (and party games!) we can prioritize our efforts. Taken even further, it allows SOC teams to finally speak the same language.

This presentation will demonstrate how Graph Databases and the Graph Theory math that supports them can solve multiple problems for the Threat Hunter. In this presentation, the audience can expect to learn:

1. How to avoid the worst Hunt projects.
2. How to determine the most impactful Hunt projects.
3. How to accurately measure your efforts in a way that isn't a watered-down metric from another team.
4. How other teams in the SOC benefit from the same methodology.