Threat hunting is the proactive search for attackers who have evaded existing detections. Instead of waiting for an alert, a hunter assumes compromise may already exist and goes looking for evidence. Hunting matters because no set of detection rules is complete, and skilled attackers deliberately use legitimate tools and valid accounts to stay below alerting thresholds. A good hunt either finds something or improves detection, so it is never wasted effort.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 6 more sections, 7 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.