SANS 2025 threat hunting survey
Advancements in Threat Hunting Amid AI and Cloud Challenges
The 2025 SANS Threat Hunting Survey marks a decade of tracking how organizations evolve their threat hunting capabilities.
This year’s findings reinforce that threat hunting remains a critical function within security operations, with organizations prioritizing agility, methodology refinement, and better integration of intelligence sources.
Download the report
By submitting this form, I consent to ThreatDown or an authorized partner contacting me regarding products and services and using my personal data as described in the ThreatDown’s Privacy Policy.
Key findings
- 45% of organizations now update methodologies as needed, up from 35% in 2024
- 61% of respondents cite skilled staffing shortages as a primary barrier to success
- 76% of organizations report seeing LOTL techniques in nation-state attacks