Glossary: Security Operations and Incident Response

Threat hunting

Also written: hunt, hypothesis

A proactive search, starting from a testable hypothesis, for attackers that no alert has caught. Alex's hunt found Sam's forwarding rule and turned it into a new SIEM rule.