A group of individuals that operate within consenting customer networks and systems to detect, characterize, and enable the eradication of malicious cyber actors that evade detection by other information security methods. Hunt teams may leverage direct access to network devices and administrators, as well as operational security measures, to collect data about network systems, traffic, users, and resources in order to detect malicious cyber actors.
Sources:
CNSSI 4009-2022