SOC-Hunting Interface

The working relationship between routine SOC operations and threat hunting, how hunt hypotheses, findings, and new detections flow between them, that turns hunt output into operational defense.