<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>SOC - Tag - Predefender Threat Hunt Book</title><link>https://huntbook.predefender.com/tags/soc/index.html</link><description/><generator>Hugo</generator><language>en-us</language><lastBuildDate>Thu, 09 Jul 2026 00:00:00 +0000</lastBuildDate><atom:link href="https://huntbook.predefender.com/tags/soc/index.xml" rel="self" type="application/rss+xml"/><item><title>From Alerts to Hypotheses</title><link>https://huntbook.predefender.com/part-1/introduction/from-alerts-to-hypothesis/index.html</link><pubDate>Sat, 18 Oct 2025 17:10:11 +0200</pubDate><guid>https://huntbook.predefender.com/part-1/introduction/from-alerts-to-hypothesis/index.html</guid><description>How SOC alert handling can develop into hypothesis-driven threat hunting by turning observations, gaps and recurring questions into structured investigations.</description></item><item><title>When to Engage Threat Hunters</title><link>https://huntbook.predefender.com/part-1/introduction/when-to-engage-threat-hunters/index.html</link><pubDate>Sat, 29 Mar 2025 15:04:35 +0100</pubDate><guid>https://huntbook.predefender.com/part-1/introduction/when-to-engage-threat-hunters/index.html</guid><description>When threat hunters should be involved, how they complement SOC triage, incident response and DFIR, and when hunting is the wrong tool for the job.</description></item></channel></rss>