Threat Hunting has become a critical part of a robust security program. Organizations can no longer rely solely on reactive technologies, as advanced attackers have learned how to bypass these controls and move undetected within the environment. Even with advanced protective measures in place, suspicious activity doesn’t always trigger an alarm. Therefore, many security teams struggle to understand whether a breach is in progress or if it happened in the past, with hackers waiting stealthily to enact ransomware.

Many organizations understand the value of Threat Hunting and have a desire to initiate a hunt but simply don't know how to get started. This guide will provide some Threat Hunting background, give examples of various resources, and identify steps required for a successful Threat Hunting engagement.