Threat Hunting Management Workshop: The Business Value of Threat Hunting

About the Threat Hunting Management Series

The Threat Hunting Management series is designed to help security leaders build and mature their threat hunting programs. Each session focuses on a key element of managing hunt teams, from hiring and development to collaboration and program strategy.

What This Session Covers

On October 29 from 12:00–12:30 PM ET, Sr. Threat Hunt Analyst Scott Poley will share how security leaders can build and advocate for a threat hunting capability, even when budget or executive support is limited. Many supervisors and team leads recognize the importance of hunting but struggle to show value in terms that resonate outside the SOC.

This workshop will outline how a hunting program can deliver measurable value across the business, helping leaders demonstrate:

• CFO, Finance, and Risk: Lower expected breach costs, fewer unplanned IR expenditures, potential premium credits from cyber insurers, and stronger board-level reporting.
• Legal and Compliance: Faster and more defensible incident scoping, evidence of “reasonable security” for regulators, and reduced fines through demonstrable due diligence.
• Security Leadership: Validation of defenses, stronger detection capabilities, and a foundation for scaling hunting efforts over time.

Scott will also share how teams can begin showing positive results without a dedicated budget, including how to prioritize hunts, focus on achievable objectives, and develop early use cases that strengthen the argument for long-term investment.

Certification and Resources

Attendees will leave with strategies to position threat hunting as more than a security function and to build momentum for programs that support both organizational resilience and business goals. Those who complete the workshop and final challenge will also earn a certification from Intel 471's Threat Hunting Management Program, which they can display on social media as recognition of their accomplishment.