Blindfolded on the Battlefield: The Importance of Threat Hunting in the Modern Age

This is the first installment in a three-part series on threat hunting by Dr. Eric Cole published on the IBM SecurityIntelligence blog. Be sure to read Part 2 and Part 3 for more information.

One of the fundamental problems with cybersecurity is that organizations often do not realize when they are compromised. Traditional incident response methods are typically reactive, forcing security teams to wait for a visible sign of an attack. The problem is that many attacks today are stealthy, targeted and data-focused.

Just stop for a moment to ask yourself: How would you know if you were compromised? The typical answer is that you would not detect a compromise until significant damage has already been caused. Security professionals need a more aggressive approach to proactively hunt for threats on their networks.

What Is Threat Hunting?

Read more

2017-09-22T18:52:13+00:00 August 23rd, 2017|Threat Hunting|

About the Author:

Eric Cole
Dr. Eric Cole is a renowned security expert with three decades of in-the-trenches experience in IT and network security. He is the author of several books and textbooks, including most recently, "Online Danger," and has presented at many major conferences. He was formerly CTO at McAfee and chief scientist at Lockheed Martin, and served on the cyber security commission for President Barack Obama.