IT Security — Creating A Robust Threat Hunting Capability
Threat hunting programs embrace this assumption and acknowledge the responsibility of security teams not only to build strong defenses but also to seek out intruders who have already stealthily established a foothold on the organization's network. Threat hunting activities are a highly specialized area of cybersecurity that requires both highly skilled analysts and a commitment of time and resources. Organizations that conduct threat hunting seek to reduce the time required to detect a breach and, ideally, root out attackers before they are able to cause extensive damage.
This IDC PlanScape explores threat hunting as an important aspect of cybersecurity.