Detection & Evasion

What is threat hunting?

Threat hunting is the proactive search for threats that have evaded automated defenses, using hypotheses, intelligence, and analysis rather than waiting for alerts. It assumes attackers may already be present.

Elastio extends threat hunting into the data itself: its Hunt Engine continuously inspects live, replicated, and backup data, and Custom Hunts let analysts run their own SQL, YARA, and regex queries across recovery points.

Related terms
Related Elastio resources
See how Elastio proves clean recovery
Elastio hunts for ransomware inside your live, replicated, and backup data and pinpoints the last recovery point proven clean.
Related questions
PreviousWhat is fileless malware?NextHow does Elastio detect ransomware that endpoint and perimeter security miss?