Glossary: Incident Response and Resilience

threat hunting

Also written: hunt, hunting

Searching your systems for signs of an attacker before any alert fires, on the assumption that one may already be inside. Each hunt starts from a hypothesis and ends by turning the search into an alert.