The SOC teams responsible for detecting and stopping breaches are famously short-staffed. Data breaches were up dramatically in 2017. The sheer scope and variety of events that occur in a modern enterprise makes classifying security events a daunting task. Gartners Anton Chuvakin believes that only 0.1 percent of organizations will have the capabilities to be successful at threat hunting on their own. The more analysts you have and the richer your data set, the better the quality of your data is for threat hunting.”]
Source: https://www.csoonline.com/article/3254230/how-to-automate-threat-hunting.html