What is a Threat Hunter?

A threat hunter takes a proactive approach to detecting cybersecurity threats using the scientific method to test and validate their hypotheses. A threat hunter investigates, identifies, and reports on threats and patterns that are not identified by automated tools. A threat hunter can identify patterns of adversarial behavior and develop threat profiles from public sources of intelligence and privately-sourced information. A threat hunter will report upon their findings, and may recommend further investigation to respond and remediate verified security threats.

↑