SANS 2019 Threat Hunting Survey

<h2>The Differing Needs of New and Experienced Threat Hunters</h2> <p>Threat hunting is a proactive approach to identifying signs of an attack, as opposed to the reactive approach security operations center (SOC) analysts follow.</p> <p>The 2019 SANS Threat Hunting Survey finds that there is still confusion as to what respondents believe constitutes threat hunting and how to properly approach it. The report aims to dissipate that confusion by helping organizations understand what threat hunting is, why it is essential in protecting their organizations, and how threat hunters can improve their process.</p> <p>Some of the survey findings include:</p> <ul> <li>Organizations put less value in endpoint and memory forensics</li> <li>Respondents have decreased their hypothesis-driven hunting</li> <li>Many organizations are dual-tasking threat-hunters</li> <li>Organizations are still struggling to measure the benefits of threat hunting</li> </ul> <h3><strong>Download the whitepaper for </strong><strong>key takeaways you can integrate into your threat hunting programs.</strong></h3>