Threat hunting using Security Onion in virtual network

This project focuses on applying threat hunting, a proactive cybersecurity strategy, within a simulated network and systems. The objectives are to actively look for and identify sophisticated threats or malicious behaviors that could have sneaked past traditional security measures. The project adheres to a methodical threat hunting framework that includes phases like planning and preparation, hypothesis creation, data collection, analysis and continuous improvement. This project was conducted using Security Onion tools such as Sguil and K.ibana. As a result, the threat hunting project has shown its effectiveness in proactively identifying and reducing threats, lowering the network's risk exposure, and maintaining a strong cybersecurity defense against constantly changing threats. The outcome of this project is expected to improve threat hunting skills, enhance security posture, and reduce the time spent in the presence of attackers in order to proactively deter emerging threats.