Methodology

I am not here to speak the Truth. I am here just to give you a method to perceive it.

– Jaggi Vasudev, Of Mystics & Mistakes

Table of Contents

• Hypothesis-Driven Hunting

  A practical explanation of hypothesis-driven threat hunting and how threat hunters can turn assumptions about adversary behaviour into focused, testable investigations.

• Anomaly-Driven Hunting

  A practical explanation of anomaly-driven threat hunting and how threat hunters can use baselines, deviations and context to identify suspicious behaviour.

• Intelligence-Driven Hunting

  A practical explanation of intelligence-driven threat hunting and how threat hunters can turn threat intelligence into focused, relevant and testable investigations.