Back to Glossary

Security process

Threat Hunting

Proactively searching an organisational environment for signs of Threats that standard monitoring has not detected.

Related domain: CybersecurityConcept ID: concept-threat-hunting

Definition

Threat Hunting is the deliberate process of searching an organisation's environment for signs of Threats even when standard monitoring mechanisms have not detected them.

Human Explanation

Instead of waiting for an alert, analysts actively search for traces that may indicate an attacker's presence.

Why it Matters

It can reveal advanced Threats that remain invisible to traditional detection mechanisms.

Conceptual Boundary

Threat Hunting does not replace Security Monitoring or SIEM. It is a complementary analytical process.

Practical Perspective

Threat Hunting is most effective when analyst expertise is combined with information from multiple sources.

Related Concepts