Threat Hunting Fundamentals

Threat hunting is the proactive search for adversaries in the environment. Looking for what detection didn't catch, what alerts didn't surface, what hasn't been triggered yet. Where SOC analysts work reactively from alerts, threat hunters work proactively from hypotheses. Where detection engineers build rules to find known patterns, hunters find patterns that don't yet have rules.