Threat Hunting

Threat hunting↗ is the proactive practice of searching through a network for signs of hidden threats or attackers that have evaded existing security tools, rather than waiting for an automated alert to flag something.

Threat hunters form hypotheses, like \"could an attacker be using this specific technique here?\", and dig through logs and system behavior to test them. This human-led approach catches sophisticated intrusions that automated detection alone might miss.