Cybersecurity definition
What is Threat Hunting?
By Cyber Tool Stack Editorial TeamUpdated
Definition
The practice of proactively searching historical activity data for signs of a compromise that never triggered an automatic alert.
Where Threat Hunting fits in the security landscape
These beginner lessons use this term while explaining the surrounding security control.
Related cybersecurity terms
EDREndpoint Detection and ResponseSoftware that continuously records what happens on endpoints (processes, files, network connections) and detects, investigates, and responds to malicious behavior.SIEMSecurity Information and Event ManagementA central system that collects logs from across an environment, correlates them into alerts using detection rules and behavioral baselining, and lets analysts search historical activity during an investigation.SOCSecurity Operations CenterThe team (in-house or vendor-run) responsible for monitoring security alerts around the clock and responding when something looks like a real incident.