Pete Hea: Why Cybersecurity Analysts Need “Arts and Crafts”
A DEF CON 31 talk on how visualization helps analyze cyber attacks. The speaker shows that complex incidents, threat intelligence reports, and investigation results are much easier to understand through diagrams than long text.
He proposes a method for visualizing attacks: a timeline on the horizontal axis and artifact sources (host, network, files, etc.) on the vertical axis.
This approach makes it easier to see the attack chain, escalation points, and opportunities to improve defenses. The talk demonstrates how such diagrams can be used for threat hunting, malware analysis, and incident response.
He proposes a method for visualizing attacks: a timeline on the horizontal axis and artifact sources (host, network, files, etc.) on the vertical axis.
This approach makes it easier to see the attack chain, escalation points, and opportunities to improve defenses. The talk demonstrates how such diagrams can be used for threat hunting, malware analysis, and incident response.