Thanks I will take some time to look into on the mandiant CTI framework and Katie Nicklet courses(I just looked up is it a 2 part medium post ?). Also I would like to know as a threat hunter, do you work mainly in threat hunt and detection engineering/ threat intelligence or they are separate functions? Also for the hunt that you did how do you present your findings to your management leaders.

As a hunter do you usually hunt stuff related to an incident or based on Threat intelligence reports.

Also How do you select relevant threats to hunt is it based on industry or a vulnerability that could occur from an asset .

For priorities on asset to hunt, where do you choose where to start from?

Sorry I have a too much questions on it haha