Hunt Watch

The Hunt Watch proactively hunts your environment for threats, without waiting for an alert.

Worker	What it does	Works with
Continuous Threat Hunt	Searches your data for activity that matches threat reports and for detection coverage gaps.	The Rule Coverage Worker in the Detection Watch, which proposes rules for the detection gaps this Worker finds.

When to turn on the Hunt Watch

Turn on the Hunt Watch when you want to search for threats proactively, without waiting for an alert. Turn it on together with the Rule Coverage Worker, so the detection gaps it finds become rules.