ConceptsDefense Evasion Hunts

Defense Evasion Hunts

Threat hunts that specifically look for signs attackers are hiding or defeating defenses, such as logging gaps, disabled security tools, obfuscation, or masquerading, since evasion itself leaves detectable traces.

Glossary definition

6 direct links1 lesson

Concept Neighborhood

Explore this concept’s connections in the groups below.

PrerequisiteRelated

Start here

Hunt Hypothesis

The foundation Defense Evasion Hunts builds on, worth understanding first.

Open concept →

Prerequisitelearn this first

Hunt HypothesisStart here

A specific, testable statement of what malicious activity might be present and how it would show up in data, that drives a threat hunt, giving it a clear question to investigate rather than aimless searching.

lessons

Relatedsorted by lesson coverage

Frequency Analysis

lessons

Defense Evasion

lessons

C2 Hunts

lesson

Credential Access Hunts

lesson

Initial Access Hunts

lesson

Related Lessons

1 lesson covers this concept

Use Intelligence and ATT&CK Carefully

SOC Analyst