Questions From a Beginner Threat Hunter

**Executive Summary:** This Q&A primer distinguishes threat hunting from passive detection, outlines the processes, data sources, and knowledge required to perform hunts, explains stealthy techniques like C2 over DNS and associated indicators (e.g., increased DNS queries, TCP/443 traffic without TLS, unusual PowerShell activity), and recommends tools and tactics for effective investigation.