Retro Hunt

Definitions

1. A search across stored historical telemetry to find indicators or behavioral patterns that were not recognized or queried at the time the data was first collected. Retro hunts are useful after new intel appears because they can reveal earlier compromise that current alerts missed.

   In plain English: Searching old security data for signs of threats discovered only later.

   Example: "The team ran a retro hunt across ninety days of endpoint data after learning the actor used a newly identified DLL sideload path."

Related Terms

• Anomaly Detection
• Behavioral Analysis
• Cyber Deception
• Deception Technology
• Decoy System
• DNS Sinkhole
• Dwell Time
• EDR