Cyber Threat Hunting to Detect Unknown Threats in the Enterprise Network
Arssy Hasyir Nursidiq, Charles Ci-Wen Lim · 2023
As the threat landscape continues to evolve, companies have increasingly turned to a diverse array of tools and techniques to detect and combat potential risks. Cyber Threat Intelligence (CTI) emerges as a crucial resource, empowering organizations to stay one step ahead of these threats. However, in the face of constantly evolving security challenges, traditional Security Operations Centers (SOCs) reliant solely on SIEMs may prove inadequate. To effectively counter these dynamic threats, heightened awareness and the adoption of advanced techniques, such as proactive monitoring, become imperative. Consequently, this research paper presents a modified threat-hunting framework designed to significantly enhance the detection capability for identifying previously undetected threats within enterprise environments. By leveraging the threat-hunting framework, organizations can derive invaluable insights, enabling them to develop new use cases. These insights will be seamlessly integrated into security devices to effectively detect and neutralize adversaries, bolstering the overall security posture of the enterprise. This paper aims to empower organizations with a proactive approach to cybersecurity, effectively mitigating risks and safeguarding against emerging threats.