Hi,
In “Threat Hunting Hypothesis” chapter, the author recommends to set a duration for the hunt.
I lack experience in this field and I’m not sure to understand what it means on a practical level.
Does it mean that we have to go over the hosts once in this time frame or do we have to go over the hosts frequently during this time frame (for instance once or twice a day) for each host?