CompTIA Cybersecurity Analyst (CySA+) CS0-002 Cert Guide, 2nd Edition

Chapter 13

The Importance of Proactive Threat Hunting

This chapter covers the following topics related to Objective 3.3 (Explain the importance of proactive threat hunting) of the CompTIA Cybersecurity Analyst (CySA+) CS0-002 certification exam:

• Establishing a hypothesis: Discusses the importance of this first step in threat hunting.

• Profiling threat actors and activities: Covers the process and kits application.

• Threat hunting tactics: Describes hunting techniques, including executable process analysis.

• Reducing the attack surface area: Identifies what constitutes the attack surface.

• Bundling critical assets: Discusses the reasoning behind this technique.

• Attack vectors: Defines various attack vectors.

• Integrated intelligence: Describes a ...