{"id":2615,"date":"2025-04-28T13:26:23","date_gmt":"2025-04-28T13:26:23","guid":{"rendered":"https:\/\/www.intrinsec.com\/?page_id=2615"},"modified":"2025-10-09T15:48:33","modified_gmt":"2025-10-09T15:48:33","slug":"threat-hunting","status":"publish","type":"page","link":"https:\/\/www.intrinsec.com\/en\/threat-hunting\/","title":{"rendered":"Threat Hunting"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

\n Threat Hunting<\/span> <\/h1>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

\u00cates-vous certain que votre SI n\u2019est pas d\u00e9j\u00e0 compromis ?<\/p>

Le Threat Hunting vous permet de d\u00e9busquer ce que les outils ne voient pas : persistance, mouvements lat\u00e9raux, erreurs d\u2019exposition. Faites la chasse aux signaux faibles, aux TTPs avanc\u00e9es et aux compromissions silencieuses.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
\n\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t<\/i>\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\tPrendre contact<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Le Threat Hunting compl\u00e8te le SOC en parcourant vos syst\u00e8mes informatiques et vos Syst\u00e8mes Informatiques connect\u00e9s pour identifier les vuln\u00e9rabilit\u00e9s, les failles de s\u00e9curit\u00e9 et les activit\u00e9s furtives que les outils automatis\u00e9s n'ont pas d\u00e9tect\u00e9es. Cette chasse proactive s\u2019appuie sur une analyse des risques approfondie et des audits cibl\u00e9s pour mesurer le niveau de s\u00e9curit\u00e9, valider les hypoth\u00e8ses d\u2019attaque et prioriser les mesures de s\u00e9curit\u00e9 n\u00e9cessaires.\nNos chasseurs recherchent les signes de piratage et de cybercriminalit\u00e9 (persistances, mouvements lat\u00e9raux, exfiltration de donn\u00e9es sensibles) et exploitent des techniques de r\u00e9trohunting pour diagnostiquer des incidents de s\u00e9curit\u00e9 anciens ou discrets. Les actions incluent l\u2019investigation des authentifications anormales, la v\u00e9rification des mots de passe, l\u2019analyse des vecteurs d\u2019acc\u00e8s et la recommandation de solutions de s\u00e9curit\u00e9 (chiffrement, cryptographie, renforcement des politiques de s\u00e9curit\u00e9 informatique) pour s\u00e9curiser le syst\u00e8me et s\u00e9curiser les syst\u00e8mes \u00e0 risque.\n\u00c0 l\u2019issue de chaque campagne, nous livrons des livrables op\u00e9rationnels : rapport d\u2019audit de s\u00e9curit\u00e9, playbooks de rem\u00e9diation, priorisation de la gestion des risques et mesures concr\u00e8tes pour prot\u00e9ger la s\u00e9curit\u00e9 des r\u00e9seaux et la s\u00e9curit\u00e9 de l\u2019information. Objectif : r\u00e9duire le risque informatique, am\u00e9liorer votre s\u00e9curit\u00e9 num\u00e9rique et permettre \u00e0 votre DSI d\u2019\u00e9lever durablement le niveau de s\u00e9curit\u00e9 de vos infrastructures.\nDiscuter avec un expert \u2014 Prendre rendez\u2011vous | Audit & rem\u00e9diation : \/audit-securite | R\u00e9ponse \u00e0 incident : \/reponse-a-incident | Abonnement CERT : \/cert<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Vos enjeux majeurs <\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Aller au-del\u00e0 des alertes SOC classiques pour d\u00e9tecter les attaques furtives<\/h3><\/div>\n <\/div>\n\n
\n \n
\n <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Identifier les menaces actives, dormantes ou pass\u00e9es inaper\u00e7ues<\/h3><\/div>\n <\/div>\n\n
\n \n
\n <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/i>\n <\/div>\n \n

R\u00e9duire le temps de d\u00e9tection (MTTD) et limiter les temps de latence entre intrusion et r\u00e9action<\/h3><\/div>\n <\/div>\n\n
\n \n
\n <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Renforcer votre d\u00e9tection, votre SIEM \/ EDR \/ SOC par l\u2019analyse proactive de comportements suspects<\/h3><\/div>\n <\/div>\n\n
\n \n
\n <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n
\n\n <\/path><\/svg>\n <\/div>\n \n

Alimenter la chasse en continu gr\u00e2ce aux CTI, MITRE ATT&CK, IOC & hypoth\u00e8ses plausibles<\/h3><\/div>\n <\/div>\n\n
\n \n
\n <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t
\n\t\t\t\t\t
\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t
\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Vous n\u2019avez pas d\u2019alerte ne veut pas dire que vous \u00eates en s\u00e9curit\u00e9\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\n
\n\n \n
\n\n \n \n <\/div>\n\n
\n

<\/h4><\/div>\n
\n

Les attaquants savent contourner vos d\u00e9fenses. Le Threat Hunting vous rend capable d\u2019aller les chercher vous-m\u00eame.<\/p> <\/div>\n\n \n <\/div>\n <\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Pourquoi le Threat Hunting est devenu indispensable ?\n<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t
\n\n
\n
\n
\n
\n
\n \n
\n\n
\n\n \n\n <\/i>\n <\/span>\n \n \n Attaques cibl\u00e9es discr\u00e8tes <\/span>\n \n \n <\/div>\n\n \n <\/div>\n <\/a>\n <\/div>\n
\n \n
\n\n
\n\n \n\n <\/path><\/svg>\n <\/span>\n \n \n Phishing <\/span>\n \n \n <\/div>\n\n \n <\/div>\n <\/a>\n <\/div>\n
\n \n
\n\n
\n\n \n\n <\/i>\n <\/span>\n \n \n Ransomware <\/span>\n \n \n <\/div>\n\n \n <\/div>\n <\/a>\n <\/div>\n
\n \n
\n\n
\n\n \n\n <\/path><\/svg>\n <\/span>\n \n \n Zero-Day <\/span>\n \n \n <\/div>\n\n \n <\/div>\n <\/a>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n\n
\n
\n
\n
\n <\/div>\n <\/div>\n
\n
\n <\/div>\n <\/div>\n
\n
\n <\/div>\n <\/div>\n
\n
\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/a>\n <\/div>\n <\/div>\n \t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Les attaques cibl\u00e9es sont discr\u00e8tes, contextuelles et \u00e0 faible niveau de bruit<\/h3>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t