What is (cyber) threat hunting and where do you start?

This report explains proactive threat hunting—what it is, how it differs from alert management, a high-level hunting process, an example technique for detecting compromised accounts using geo-infeasible logins, and the basic requirements (personnel, data collection tools, and a list of hunts). It also advises on when hunting is appropriate for an organization based on risk profile.