Scope X: Hunt in the Ocean of Unknown Assets
Meisam Eslahi introduces 'Scope X', a threat hunting methodology designed to discover and defend against entry points outside traditional assessment scopes.
Summary
The Peril of Restrictive Scoping in Cybersecurity
Traditional security assessments focus narrowly on predefined scopes, yet adversaries routinely breach enterprise networks through unmapped shadow assets and forgotten perimeter systems.
Introducing the Scope X Threat Hunting Concept
Meisam Eslahi introduces 'Scope X'—a proactive hunting framework focused on identifying unknown unknowns across public infrastructure, supply chains, and subsidiaries.
Hunting for Unindexed Entry Points and Shadow IT
Eslahi demonstrates techniques for correlating passive DNS, TLS certificates, IP allocations, and ASN metadata to map an organization's true attack surface.
Integrating Scope X into Continuous Threat Hunting
The author provides blue teams with practical workflows to continuously expand threat hunting operations beyond rigid compliance scopes.
Related talks
Blue Team Village·55 min
Meisam Eslahi
Meisam Eslahi presents advanced threat hunting tradecraft to track stealthy adversaries lurking across enterprise infrastructure.
Blue Team Village·41 min
Project Obsidian
Project Obsidian demonstrates using graph visualization tools to map phishing infrastructure, identify sender anomalies, and correlate multi-stage campaigns.
Blue Team Village·56 min
Ch33r10 · Jorge Orchilles
Ch33r10 and Jorge Orchilles turn standard threat reports into actionable intelligence, demonstrating advanced TTP extraction, adversary emulation, and hunting pivots.