ISC2 CISSP Practice Question

Threat hunting is the correct answer because it's a proactive security activity specifically designed to search for signs of attackers who have already bypassed existing security controls and established a presence within the network. Unlike the other options that focus primarily on external threat data or automated alerting, threat hunting involves security analysts actively searching through networks to discover and isolate advanced threats that evade traditional security solutions. Threat hunting uses hypothesis-driven investigation techniques and relies on analysts' expertise to detect subtle indicators of compromise that automated systems might miss. The other options are valuable threat intelligence components but don't specifically address the scenario of identifying adversaries already operating within the network.