What is Threat Hunting?
Threat hunters form hypotheses based on threat intelligence and knowledge of attacker techniques (such as MITRE ATT&CK), then actively search for evidence of malicious activity in logs, endpoint data, and network traffic. Unlike automated detection, threat hunting finds sophisticated threats that do not trigger rule-based alerts.
Understanding this concept is crucial for maintaining a robust security posture. In the context of modern cyber threats, threat hunting represents a significant area of focus for security professionals and organizations alike.
Related Terms
Advanced Persistent Threat (APT)
A sophisticated, targeted cyberattack in which an attacker gains unauthorized access to a network and remains undetected for an extended period.
Asset Discovery
The process of identifying all hardware and software devices within an organization's network environment.
