Threat hunting is the proactive search for attackers who are already inside the network and weren't caught by automated alerts. An analyst starts from a hypothesis and reviews logs and behavior to confirm or rule out an intrusion.
How TecnetOne handles it: TecnetSOC
cyber threat hunting, proactive threat hunting, hunting
Related terms
SIEM (security information and event management)
A SIEM (security information and event management) is the platform that collects the logs from every system in a company and correlates them, raising an alert when a sequence matches the way an attack behaves. It's the central screen of a SOC.
MSSP (managed security service provider)
An MSSP (managed security service provider) is a company that runs other companies' security under contract, managing firewalls, endpoint protection, email security and monitoring with its own team and tools. It gives a business enterprise-grade security without building an in-house security team.
MDR (managed detection and response)
MDR (managed detection and response) is a service in which a provider watches a company's devices around the clock and handles its alerts, from investigation to containment. It pairs EDR technology with human analysts and is usually priced per protected device.
Digital forensics
Digital forensics is the technical investigation of an incident to reconstruct what happened: how the attackers got in, what they touched and when. It preserves evidence so it holds up in an audit, an insurance claim or a legal process.
SOC (security operations center)
A SOC (security operations center) is the team of analysts, processes and tools that watches a company's systems around the clock and handles every alert, from investigation to containment. As a service (SOCaaS), an outside provider runs it under a subscription.
XDR (extended detection and response)
XDR (extended detection and response) widens the reach of EDR: beyond devices, it correlates what happens in email, the network, identities and the cloud on a single platform. That way it detects attacks that move across several fronts, which each tool on its own would miss.
Ready to put this into practice in your operation?
Tell us what you need and a TecnetOne engineer will get back to you.
Talk to an engineerTalk to an engineer
Tell us what you need and we’ll reply the same business day.