Cyber Threat Hunting
What is Cyber Threat Hunting?
A proactive security practice of searching through networks and datasets to detect advanced threats that evade existing automated security solutions.
Frameworks that govern cyber threat hunting
What the standards actually require on cyber threat hunting
Requirements naming cyber threat hunting across 3 standards, quoted from the control text.
The organisation establishes and maintains a cyber threat hunting capability to search for indicators of compromise and to detect, track and disrupt threats that evade existing controls, and uses it at a set frequency. No enhancements.
canada-itsp-10-033-security-and-privacy-controls-and-assurance-activities-catalogue::RA-10 · RA-10 Threat hunting →Conduct cyber threat hunting activities to search for indicators of compromise in organizational systems and detect, track, and disrupt threats that evade existing controls.
3.11.2e · Threat Hunting →a. Establish and maintain a cyber threat hunting capability to: 1. Search for indicators of compromise in organizational systems; and 2. Detect, track, and disrupt threats that evade existing controls; and b.
NIST800-RA-10 · RA-10 Threat Hunting →Questions people ask about cyber threat hunting
What is Cyber Threat Hunting?
Why is Cyber Threat Hunting important for compliance?
Which compliance frameworks address Cyber Threat Hunting?
Where can I learn more about Cyber Threat Hunting?
See how Cyber Threat Hunting applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.