Threat Hunting

What is Threat Hunting? Threat hunting involves actively looking for traces of cyber-attacks (Past and Present) in an Organization searching iteratively through networks to detect indicators of compromise (IOCs), hacker tactics, techniques, and procedures (TTPs) and threats such as Advanced Persistent Threats (APTs) that are evading existing environment security baselines. Threat Hunting includes:    Hunting for insider threats or outside attackers.    Proactively hunting for Known adversaries.    Searching for hidden threats to prevent the attacks from happening.    Executing the incident response plan.   When we are focusing on the process of threat hunting it consists of 5 Phases. Process of Threat Hunting ·          Choose a Target This stage of the threat-hunting process is intended to determine the question that the threat-hunt is designed to answer. A good resource for making this decision is the...