Can anyone please describe what is Threat Hunting and how it should be conducted/deploy/monitor? Is it similar to SIEM systems with more advanced and automated use cases?
I went through google search results and Wiki page of Threat hunting, and to me, it sounds similar to SIEM systems with some automation, ML, UEBA, and OSINT. I have worked on QRadar and I see a lot of new ML use-cases are getting released in regular updates in QRadar UBA (I guess the same thing is happening for other SIEM products). This increase my confusion regarding Threat Hunting.