How deeply does Cyber Threat Hunting cover NIST SP 800-53?

Defines control structure and identifies RA-10, but defers detailed control guidance to official NIST resources.

NIST SP 800-53

A NIST publication defining security and privacy controls for information systems and organizations.

NIST SP 800-53 is a security and privacy control standard for information systems and organizations. Threat hunters use it as a reference when formalizing a threat-hunting practice, especially in organizations structured around NIST controls. section 2.7.2 section 2.0

Key features relevant to threat hunting include:

Rev. 5 organizes controls into three impact classes: low, moderate, and high, and 18 control families. section 2.7.2
Risk Assessment control RA-10 establishes and maintains a cyber threat-hunting capability. section 2.7.2
RA-10 directs hunters to search for indicators of compromise and detect, track, and disrupt threats that evade existing controls. section 2.7.2
Threat hunting is framed as active defense through proactive searches across organizational systems, networks, and infrastructure. section 2.7.2

Applying RA-10

A security team can use RA-10 to justify and structure hunts for advanced threats that bypass firewalls, intrusion prevention, sandboxing, or security information and event management technologies. section 2.7.2

How Cyber Threat Hunting covers it

liveBook manning.com

Read Cyber Threat Hunting on liveBook Get the book at manning.com

Related concepts

threat huntingconfigures · Threat hunting is the proactive investigation of systems and networks to discover malicious activity that automated detection may have missed.
API securityuses · API security is the protection of application programming interfaces, their functionality, and exposed data from unauthorized access, misuse, alteration, and disruption.
pipelineconfigures · A pipeline is an ordered or coordinated sequence of connected processing stages or tasks that passes data, work, or results toward an outcome.

This explainer was generated by Manning's knowledge graph from the text of Cyber Threat Hunting. The section links point to the parts of the book it draws on.