Cyber Threat Hunting (CTH)
(การล่าและตรวจจับภัยคุกคามทางไซเบอร์)
Definition
Cyber Threat Hunting (CTH) (การล่าและตรวจจับภัยคุกคามทางไซเบอร์) Hard Skill
Cyber Threat Hunting (CTH) is the proactive process of searching for hidden or emerging cyber threats within a network or system to identify and mitigate potential security breaches before they cause damage.
Expertise Level
Level 1
Basic
1. Understands basic cyber threats and common attack vectors.
2. Familiar with fundamental network monitoring tools.
3. Can recognize simple indicators of compromise (IOCs).
Level 2
Intermediate
1. Able to perform active threat hunting using logs and telemetry data.
2. Uses various tools and techniques to identify suspicious behavior patterns.
3. Analyzes alerts and investigates anomalies to reduce false positives.
Level 3
Advanced
1. Designs and implements complex hunting hypotheses and strategies.
2. Synthesizes data from multiple sources to uncover advanced persistent threats (APTs).
3. Leads threat hunting operations and develops automated detection mechanisms.
