
Practical Threat Intelligence and Data-Driven Threat Hunting
By :

As is the case with any other program in an organization, it is necessary to demonstrate results. Is the job that the team is doing effective? Is the tooling enough? Is the personnel enough? Is the program being effective? In order to answer all of these questions, among others, teams need to have a carefully selected set of metrics to show progress and prove that the program is working as expected (or not).
The right time to choose metrics is during the development stage. Ask yourself what a successful hunting program for your organization would be and select the metrics you are going to track depending on your answer.
So, what does "successful hunting program" mean? Given everything that has been covered so far, we are going to set up a list establishing what a successful hunting program will look like for us:
Change the font size
Change margin width
Change background colour