Threat hunting is the proactive search for threats that have evaded existing detections. Instead of waiting for an alert, hunters assume a breach may already have happened and look for evidence. Hunting is analyst-driven, but its best results become automated detections so the same threat is caught next time without a hunt.
Free account
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 4 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.