A cybersecurity analyst is contributing to a team hunt on an organization's endpoints. Which of the following should the analyst do FIRST?
A) Write detection logic.
B) Establish a hypothesis.
C) Profile the threat actors and activities.
D) Perform a process analysis.

Question

Quizplus · Accepted Answer

Establishing a hypothesis is the first step in a threat hunting process, as it guides the direction of the investigation and helps in identifying what to look for in the organization's endpoints.

A Cybersecurity Analyst Is Contributing to a Team Hunt on an Organization's