// defense · 01 / 06
Hunt loop
Hypothesis first
Intel/ATT&CK → hypothesis → query → investigate → new detections.
// check yourself
Hunting without a hypothesis…
// defense · 01 / 06
Hypothesis first
Intel/ATT&CK → hypothesis → query → investigate → new detections.
// check yourself
Hunting without a hypothesis…