SANS 2021 Threat Hunting Survey

The Evolution of Threat Hunting

For six years, SANS has conducted a Threat Hunting Survey to examine how cybersecurity professionals hunt inside their organizations to more rapidly detect and identify threats. This year’s survey seeks to better understand the current landscape of threat hunting for organizations and the benefits that threat hunting can bring to an organization’s security posture. Based on the responses to the 2021 survey, this paper summarizes changes that we have seen over the past two years of authoring the threat hunting survey for SANS, as well as observations about those changes. We also look at how organizations have improved their threat hunting efforts over time.

Unlike in previous years, the 2021 survey included questions about the impact of COVID-19 on threat hunting efforts. Organizations experienced varying impacts from the pandemic: Some organizations experienced a negative impact on their security postures, while others saw a more targeted focus on cybersecurity and threat hunting in their organization. A significant number of respondents report uncertainty as to what type of impact the pandemic has had on their threat hunting teams. Significant uncertainty about the pandemic lingers, and many respondents report they anticipate significantly increasing their threat hunting activities in the coming 24 months.

Download this report to learn:

  • The impact of COVID-19 on threat hunting
  • Threat hunting teams and maturity levels
  • What is included in a modern threat hunter’s toolbox
  • Benefits of threat hunting
  • Barriers to success
  • What today’s threat hunting teams look like

    Please complete the form below to access this research:

    Business E-mail Address

    First Name

    Last Name


    Job Role

    Job Function

    Company Size



    State / Province

    Zip / Postal Code


    Business Phone Number

    Your privacy is a top concern for us at Knowledge Hub Media. We’ll only use your personal information to provide you with the content, products and/or services you’ve requested from us. By entering your contact information and clicking on the “submit” button below, you are confirming that you have carefully read Knowledge Hub Media’s Terms of Use agreement, and Privacy Policy, and agree to be legally bound by all such terms.

    Yes, I agree to the Terms of Use Agreement.

    Yes, I agree to the Privacy Policy.

    The third party vendor sponsoring this content may wish to contact you regarding products and/or services as they relate to this white paper/research. Please check the appropriate boxes below, indicating the ways in which you would like to receive communication from our third party affiliates:

    Yes, I would like to receive communication by email.Yes, I would like to receive communication by telephone.Yes, I would like to receive communication by postal mail.

    Knowledge Hub Media would also like to keep in touch regarding related content, white papers, business/technology research and upcoming events in your area of expertise. Please check the appropriate boxes below to opt-in:

    Yes, Knowledge Hub Media may contact me via email.Yes, Knowledge Hub Media may contact me via telephone.Yes, Knowledge Hub Media may contact me via postal mail.

    You can easily change your communication and consent preferences at any time. Opt-out of receiving communication from Knowledge Hub Media and/or our third party affiliates by easily updating your personally identifiable data and contact preferences here: Update Communication Preferences

    Comments are closed.