{"id":2334,"date":"2021-01-13T10:33:39","date_gmt":"2021-01-13T09:33:39","guid":{"rendered":"https:\/\/netcloudengineering.com\/?p=2334"},"modified":"2021-08-09T03:02:17","modified_gmt":"2021-08-09T02:02:17","slug":"threat-hunting","status":"publish","type":"post","link":"https:\/\/netcloudengineering.com\/en\/threat-hunting\/","title":{"rendered":"What is Threat Hunting and why has it become fashionable?"},"content":{"rendered":"

The Threat Hunting<\/strong> has become one of the threat hunting systems<\/strong> that is on the rise in the business world. Given its ability to detect attacks that have been in the making for a long time. And is that the operation of this type of security software means looking beyond the known alerts to discover new threats and potential vulnerabilities.<\/p>\n

Why has Threat Hunting become fashionable?<\/strong><\/h2>\n

The process of Threat Hunting<\/strong> implies the proactive search for attackers hiding in a network<\/strong>. It is a system that instead of depending on security solutions or services to discover threats. It serves as a predictive element based on layers of security that allows companies to take an offensive stance against malicious attacks that are difficult to find.<\/p>\n

These threat search systems,<\/strong> they are generally performed by security professionals<\/a> highly trained users that use a suite of advanced tools for the purpose of identifying and disrupting difficult-to-identify malicious activities on a network.<\/p>\n

\"Seguridad\"<\/p>\n

How important is threat hunting?<\/strong><\/h3>\n

According to several studies, it has been determined that an attacker remains in a compromised network for an average time of 146 days<\/strong> before being discovered. What makes these types of malicious attacks a advanced persistent threat<\/strong>.<\/p>\n

In this period, cybercriminals<\/strong><\/a> that are hidden in a network can exfiltrate data, as well as access applications to identify and use business information in order to commit fraud or, move laterally through a network to collect credentials for the purpose of accessing data and resources of capital value .<\/p>\n

The Threat Hunting<\/strong> goes beyond what has been alerted and puts users on notice<\/strong> about the risks and behaviors associated with common threats like malware, for example. In other words, this proactive search engine heads into the unknown to detect new cyber threats.<\/p>\n

Do you wonder why? Simple; let's remember that there is organized, trained and well-funded attackers<\/strong> constantly working to find at least one weakness. However, it is not very easy to discover the bad intentions of these cyber criminals, for this reason this threat hunting system was created.<\/p>\n

How does Threat Hunting work?<\/strong><\/h2>\n

Usually these security software<\/strong> detect new threat patterns through the iautomatic identification of unusual behaviors<\/strong> of the users, the process or the machine itself.<\/p>\n

How do they do that? Well, they orient their investigations to discover the main cause, reacting immediately and allowing a plan to be drawn up to strengthen the security system.<\/p>\n

On the other hand, the new attack patterns also become a threat identification behavior<\/strong> to stop future attackers before their plans are realized, thus initiating a cycle of learning and detection.<\/p>\n

Who is trained to use this threat search system?<\/strong><\/h3>\n

To launch a threat hunting campaign it is necessary to combine \u00a0Basic abilities<\/strong> in a team. These qualities include:<\/p>\n