What is Cyber Threat Hunting?
Cyber Threat Hunting — Cyber threat hunting is the proactive, human-led process of searching through networks, endpoints, and datasets to find advanced threats that have evaded automated security controls.
Cyber Threat Hunting Explained in Detail
Unlike automated alerting, threat hunting assumes that an adversary may already be present and undetected. Hunters form hypotheses based on threat intelligence, TTPs, and environmental knowledge, then actively search for evidence.
Threat Hunting Process
- Hypothesis generation — Based on new threat intel, anomalous behaviours, or security gaps.
- Investigation — Query logs, endpoint telemetry, and network traffic for evidence.
- Pattern discovery — Identify new IOCs, TTPs, or compromised assets.
- Response — Hand off confirmed threats to incident response for containment.
- Automation — Convert findings into detection rules for continuous monitoring.
How Hunto AI Helps with Cyber Threat Hunting
Explore the autonomous AI agents that address cyber threat hunting challenges.