Threat hunting is the active search for “unknown unknowns,” which describes new and novel attack behaviors that aren’t detected by current automated methods of prevention and detection. It is, by nature, a “hands-on-keyboard activity,” driven by humans. Just like hunting in nature, anyone can do it, but the right experience and tools can make you much more effective.
https://securityledger.com/2018/11/managed-threat-hunting-bridges-the-talent-gap/
Xinteng Chen says
Hello Haitao
Thanks for sharing the new technology to us. Technologies develop rapidly, but attack methods are improving at the same time. It is important for us to discover the newest attack methods as soon as possible. People should actively discover the attacks but not detect them after something occur. It will reduce the losses in some incidents,.
Ruby(Qianru) Yang says
Hi Haitao, interesting article, I like that “done right, managed threat hunting can deliver instant maturity to your security operations center, uncover the most sophisticated threats, and do it at a low cost.”