Threat Hunting

Threat Hunting is also known as cyber threat hunting, is a proactive approach to identifying previous unknown or currently ongoing cyber threats in an organization's network.

Why threat hunting is importance

Finds hidden threats

Stops hackers early

Reduces damages

Save time

Stronger security

Threat Hunting Types

There are three types of threat hunting

1.Structured Hunting

Structured threat hunting follows a predefined process and is usually based on known attacker behaviors or established frameworks

2.Unstructured Hunting

Unstructured threat hunting is exploratory and usually begins with a trigger such as a suspicious alert, anomaly, or newly discovered threat.

3.Situational Hunting

Situational threat hunting focuses on specific high-risk assets, users, or business scenarios based on the organization's current environment and risk profile.

Threat Hunting Models

1.Intel Based

Uses threat intelligence (such as IOCs) to search for known threats in the network.

2.Hypothesis

Starts with a security hypothesis about attacker behavior and investigates to prove or disprove it.

3.Data Driven

Uses security data and analytics to identify unusual activities that may indicate a cyberattack.