Skip to main content

πŸ’Ό RA-10 Threat Hunting

  • Contextual name: πŸ’Ό RA-10 Threat Hunting
  • ID: /frameworks/nist-sp-800-53-r5/ra/10
  • Located in: πŸ’Ό RA Risk Assessment

Description​

a. Establish and maintain a cyber threat hunting capability to:

  1. Search for indicators of compromise in organizational systems; and
  2. Detect, track, and disrupt threats that evade existing controls; and b. Employ the threat hunting capability [Assignment: organization-defined frequency].

Similar​

  • Internal
    • ID: dec-c-63e8dc7e

Similar Sections (Give Policies To)​

SectionSub SectionsInternal RulesPoliciesFlags
πŸ’Ό NIST CSF v2.0 β†’ πŸ’Ό DE.AE-06: Information on adverse events is provided to authorized staff and tools33
πŸ’Ό NIST CSF v2.0 β†’ πŸ’Ό DE.AE-07: Cyber threat intelligence and other contextual information are integrated into the analysis22

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlags