. https://www.symantec.com/blogs/expert-perspectives/sometimes-threat-hunting-isnt-enough
blog article
Proactively searching for threats is critical, but organizations trying to stop advanced threats need to understand that threat hunting is only one piece of the protection profile. All too often the security industry gets caught up in marketing buzzwords, causing a lopsided focus on one part of a much larger conversation. One example of this has been the emphasis on threat hunting, the proactive searching of threat indicators within an environment.  Security analysts acquire the latest indicators of compromise (IoCs) and tactics, techniques, and procedures (TTPs) and search for them within their environment.  If found, odds are high that an attack either is underway – or has already occurred - and so more investigation would be needed for context and to gain a better understanding of the full scope and scale of the infiltration. READ MORE