SANS 2025 Threat Hunting Survey: Advancements in Threat Hunting Amid AI and Cloud Challenges
The 2025 SANS Threat Hunting Survey highlights the ongoing evolution of threat hunting as organizations refine their methodologies, enhance their tooling, and balance internal expertise with outsourced support. Organizations must continue evolving their detection and hunting strategies as threat actors refine their techniques, from nation-state espionage to ransomware and supply chain compromises. The findings demonstrate that while progress is being made, challenges persist, particularly in cloud visibility, skilled personnel shortages, and measuring the impact of threat hunting programs. However, the overall trajectory for threat hunting into the future remains positive, with more organizations recognizing the value of proactive threat hunting as a critical pillar of their cybersecurity defenses.
White Paper from 