cybert3ch / taegis-threat-hunting-tutorials

Threat Hunting with Jupyter Notebooks on Taegis

Threat Hunting on Taegis Tutorials

Welcome to the Threat Hunting on Taegis Tutorials!

These interactive learning materials complement our Hunting with Jupyter Notebooks documentation. We will cover the tools and high-level workflows used to run our threat hunting operations at scale on the Secureworks Taegis™ security platform. The intended audience is threat hunters, security analysts, and security engineers with intermediate-to-expert Python skills and threat hunting experience who want to get up and running quickly hunting on Taegis. The concepts and examples should be adapted to fit the needs of your organization.

#	Tutorial	Description
01	Getting Started	Setting up a Python environment with Jupyter and Taegis-specific packages
02	Exploratory Data Analysis	Introduction to Taegis SDK for Python and Taegis Magics for EDA
03	Automating Hunting Procedures	Formalize hunting steps from EDA notebook into a repeatable hunting procedure
04	Hunting at Scale	Run hunting procedure in parallel across multiple Taegis tenants

Other Resources

• Secureworks
• Secureworks GitHub Organization
• Taegis XDR Documentation
• Taegis SDK for Python
  • SDK Docs
• Taegis Magic
  • Magic Docs