# Introduction to Threat Hunting

> Shift from reactive alert triage to proactive cyber defense. Master the fundamentals of hypothesis-driven threat hunting, the hunting maturity model, and how to uncover hidden adversaries.

Canonical: https://codelivly.com/rooms/introduction-to-threat-hunting
Last updated: 2026-07-06

| | |
|---|---|
| Level | Advanced |
| Category | Cybersecurity |
| Lessons | 4 |
| Estimated time | 30 min |
| XP | 200 |

Dive into the proactive side of the SOC. The Introduction to Threat Hunting module breaks down how to actively search for malicious actors who have bypassed automated defenses.

You will learn the difference between reactive alert triage and proactive hunting, explore the Threat Hunting Maturity Model (THMM), and understand how to formulate intelligence-driven hypotheses. By the end of this module, you will know how to structure a hunt, leverage the MITRE ATT&CK framework to find blind spots, and transition from a reactive responder to a proactive hunter.

## Lessons

1. What is Threat Hunting? (30 min)
2. Hypothesis-Driven Hunting (30 min)
3. Common Hunting Techniques (30 min)
4. Threat Hunting Tools Overview (30 min)

## Related

- [Learning path: Threat Detection and Intelligence](https://codelivly.com/learning-paths/threat-detection-intelligence)
- [All rooms](https://codelivly.com/rooms)