Internship
Student login
← SOC & SIEM learning path
SOC & SIEM · Module 8 of 10

Threat intelligence and hunting

Use intelligence and proactively search for threats.

📖 Key ideas

  1. Threat intelligence: information about attackers, tools and indicators.
  2. Levels: strategic, operational, tactical.
  3. Feeds and platforms: MISP, OTX, vendor intel.
  4. Threat hunting proactively searches for hidden threats using hypotheses.
  5. Hunts often turn into new detections.
💡 Real-life example: Threat hunting is a detective searching the house for hidden intruders before the alarm rings.
Threat intelligenceKnowledge about threats
Threat huntingProactive search for threats
HypothesisAssumption to test in a hunt
MISPThreat intel sharing platform