Practical Threat Intelligence and Data-Driven Threat Hunting

Chapter 13: Defining Good Metrics to Track Success

In the previous chapter, we introduced the concept of metrics and how we can use them. In this chapter, we are going to review some metrics that you can use to track your hunting team's success and different approaches in order to determine how effective your team is and how to improve your threat hunting program.

In this chapter, we're going to cover the following main topics:

• The importance of defining good metrics
• How to determine the success of a hunting program

Technical requirements

We need the MaGMA for Threat Hunting tool: https://www.betaalvereniging.nl/en/safety/magma/.

The importance of defining good metrics

At the end of the previous chapter, we introduced the concept of metrics ...