Threat Hunting involves actively looking for indicators of compromise or potential threats on networks and systems, often using both manual and automated tools. It goes beyond passive monitoring for known threats and aims to identify malicious activity that may not have been detected by existing security measures. Automated alerts are part of a reactive, not proactive strategy. Red team exercises are focused on simulating attacks to test the organization's defences, not on identifying ongoing unknown threats. Vulnerability assessments are used to identify known security issues to be patched, not to proactively hunt for active malicious presence.