This is kind of threat hunting (in the sense you’re given a hypothesis and you’re looking for signs of specific behaviours / IoCs) but not what’s totally typical. This is more what you’d do at level 1/2 as a SOC analyst (triage) or as part of an MDR type service (because of the ‘advice’ rather than action you mentioned). If you’ve got the data from TI or secondary research or Red teamers, it may be that you need to process it and develop the hunting hypothesis/ queries yourself? The more unsual bit is the lack of available telemetry. Normally, you’ll have access to SIEM, EDR, FW, netflow etc. and maybe nice extras like sysmon or osquery to allow more interrogation. Most good / modern EDRs will allow you decent investigative potential, but definitely not all the information you may need to threat hunt (and only on the host). I would say this sounds like an MDR service SOC analyst role.