61. Threat hunting

Develops testable hunting hypotheses, selects evidence, searches for weak signals, investigates findings, and converts discoveries into durable detections.