THREAT‑WATCH
Glossary
Threat Hunting
The proactive search for threats already present in an environment that automated detection tools haven't flagged.
Rather than waiting for an alert, threat hunters form a hypothesis (based on threat intelligence, unusual patterns, or known attacker techniques) and actively investigate an environment to confirm or rule it out. This catches sophisticated attackers who've specifically evaded automated detection, and it's one of the reasons a human-led SOC finds threats that a purely tool-driven setup misses.