{"id":23054,"date":"2021-01-29T18:59:45","date_gmt":"2021-01-29T18:59:45","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/"},"modified":"2026-08-08T18:17:28","modified_gmt":"2026-08-08T18:17:28","slug":"hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/","title":{"rendered":"Hand-to-hand combat on computer networks: How cyber threat hunters work"},"content":{"rendered":"\n

WASHINGTON \u2014 When hackers break through the Pentagon\u2019s cyber defenses, it\u2019s the job of elite threat-hunting teams to find intruders or damage.<\/p>\n\n\n\n

Most recently, U.S. Cyber Command deployed cyber teams to check military networks for any signs of a compromise following what some experts and Congress members say is potentially the biggest hack and cyber espionage campaign in U.S. history.<\/p>\n\n\n\n

The Pentagon has found no evidence thus far that the susceptibility affected Department of Defense\u2019s networks. \u201cParts of our software supply chain source have disclosed a vulnerability within their systems, but we have no indication that the DoD has been compromised,\u201d said Capt. Katrina Cheesman, a U.S. Cyber Command spokesperson.<\/p>\n\n\n\n

But the teams are looking for damage nonetheless.<\/p>\n\n\n\n

While the department doesn\u2019t share many details about how defensive cyber protection teams<\/a> do their jobs, one common tactic that threat hunters employ is monitoring networks closely for any strange behavior or actions, such as odd login times or use of unusual software.<\/p>\n\n\n\n

A network user who takes actions outside of normal daily activity could be a hacker that the defensive team must block out of computer systems, sometimes confronting active trespassers directly to deny access through a kind of virtual hand-to-hand combat.<\/p>\n\n\n\n

In the latest breach, the U.S. blames Russia for implanting malicious code in software updates provided by government supplier SolarWinds, allowing unprecedented access for months across federal networks.<\/p>\n\n\n\n

The infiltration went beyond the software vendor, with hackers accessing networks in a variety of ways, The Wall Street Journal reported in a Jan. 29 article<\/a> that included a Cybersecurity and Infrastructure Security Agency estimate that 30 percent of affected businesses and government offices did not have a direct link to SolarWinds.<\/p>\n\n\n\n

To date, Cyber Command\u2019s teams have not been asked to assist breached federal agencies but would do so if authorized, Cheesman said.<\/p>\n\n\n\n

Cyber protection teams \u2014 68 in total \u2014 make up the majority of the Pentagon\u2019s cyber troops, and they\u2019re always in high demand to help with suspicious activity throughout the vast DoD information network. Staff throughout the world use DODIN, a complex collection of thousands of local networks, for everything from sending real-time information to war fighters to storing basic personnel data.<\/p>\n\n\n\n

While cyber protection teams are the DoD\u2019s defensive frontline, they primarily act as a response force and don\u2019t get involved until an adversary breaches networks, according to a December presentation during an Army conference by one of its cyber units.<\/p>\n\n\n\n

When a breach occurs, the teams go to the site of the problem with specialized kits including a mix of laptops, small servers, passive and active sensors, analytic capability and software tools.<\/p>\n\n\n\n

They work with the local IT staff who run networks to understand the unique qualities of a particular network\u2019s day-to-day operations. The teams help search for malicious activity, eradicate any lingering interlopers, and recommend to the local personnel how to rebuild stronger network defenses.<\/p>\n\n\n\n

Each team has 39 members, but they deploy in smaller elements<\/a> to spread their expertise and rotate through active operations, regrouping and training.<\/p>\n\n\n\n

Cyber experts familiar with cyber protection teams\u2019 work described for C4ISRNET how the units would respond to a hypothetical breach, with some experts sharing insights anonymously because they are not authorized to speak publicly about the issue.<\/p>\n\n\n\n

If CPTs see the actor is still on the network, they will work to kick the hacker off by changing credentials and blocking methods of access like backdoors and then determine what information the actor reached. The teams might have to set up deliberate defense within the network, putting up blockades to disrupt adversaries and force them into certain portions of the network. That improves their ability see hackers\u2019 activity or confront them directly.<\/p>\n\n\n\n

A team\u2019s first action would likely be to get a handle on the attack vector, determining what machines or network segments run malicious software. From there, commanders prioritize hunting on the highest and most sensitive assets or portions of the network. For example, a system that works with the nuclear command and control infrastructure would be a top priority.<\/p>\n\n\n\n

Sophisticated network hunters are needed because high-end actors will obfuscate their activity with a variety of tools, such as using credentials and privileges to look like an administrator or legitimate user. CPTs will try to lock out the actors by changing credentials and passwords, a painstaking process of looking at all corners of the network, all legitimate users and credentials.<\/p>\n\n\n\n

With the latest breach, the actors were so stealthy they succeeded in masking their activity to look like a legitimate user. This is where a hunter has to know network processes inside and out, including what servers are running and what level of system is running those processes. Their forensics process might take them deep into network logs to analyze.<\/p>\n\n\n\n

These hunters carefully look for the slightest anomalous behavior. That skill is the benefit, many sources said, of training cyber warriors to joint standards to learn offense and defense.<\/p>\n\n\n\n

\u201cThe time that you spent trying to work on a network as an offensive person is going to help you understand where you might want to look defensively,\u201d said Andrew Hall, a retired Army colonel who directed the Army Cyber Institute and teaches cybersecurity at Marymount University. \u201cNow, they might use different techniques than you, so you\u2019re probably not going to find the exact same thing as you, but you think of it from both sides. You think of it as a defender, you think of it as an offensive person.\u201d<\/p>\n\n\n\n

However, the reach of the recent hack makes it difficult for hunters to know where to look. Given the wide use of the vulnerable software within the government and DoD \u2014 and how well the actor stayed hidden \u2014 experts have said uncovering the extent of the any damage could take months.<\/p>\n","protected":false},"excerpt":{"rendered":"

During a major breach, the Department of Defense tasks its elite cyber protection teams to root out hackers.<\/p>\n","protected":false},"author":7,"featured_media":39609,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":10,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":{"4":{"categories":["daily-news-roundup","newsletters"],"primary_category":"daily-news-roundup"},"5":{"categories":["daily-news-roundup","newsletters"],"primary_category":"daily-news-roundup"},"6":{"categories":["daily-news-roundup","newsletters"],"primary_category":"daily-news-roundup"},"7":{"categories":["daily-news-roundup","newsletters"],"primary_category":"daily-news-roundup"},"8":{"categories":["daily-brief","newsletters"],"primary_category":"daily-brief"},"10":{"categories":["daily-news-roundup","newsletters","pentagon"],"primary_category":"pentagon"}}},"categories":[10,106,29,32],"tags":[],"coauthors":[3268],"class_list":["post-23054","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber","category-daily-brief","category-home","category-newsletters"],"acf":{"subheadline":"","legacy_arc_id":"YRBFWJ7CDJDU7JPTLMYU7OMH24","arc_canonical_url":"\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"\nHand-to-hand combat on computer networks: How cyber threat hunters work - C4ISRNet<\/title>\n<meta name=\"description\" content=\"During a major breach, the Department of Defense tasks its elite cyber protection teams to root out hackers.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Hand-to-hand combat on computer networks: How cyber threat hunters work\" \/>\n<meta property=\"og:description\" content=\"During a major breach, the Department of Defense tasks its elite cyber protection teams to root out hackers.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/\" \/>\n<meta property=\"og:site_name\" content=\"C4ISRNet\" \/>\n<meta property=\"article:published_time\" content=\"2021-01-29T18:59:45+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T18:17:28+00:00\" \/>\n<meta name=\"author\" content=\"Mark Pomerleau\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mark Pomerleau\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t \"@context\": \"https:\\\/\\\/schema.org\",\n\t \"@graph\": [\n\t {\n\t \"@type\": \"Article\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/#article\",\n\t \"isPartOf\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/\"\n\t },\n\t \"author\": {\n\t \"name\": \"migration\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t },\n\t \"headline\": \"Hand-to-hand combat on computer networks: How cyber threat hunters work\",\n\t \"datePublished\": \"2021-01-29T18:59:45+00:00\",\n\t \"dateModified\": \"2026-08-08T18:17:28+00:00\",\n\t \"mainEntityOfPage\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/\"\n\t },\n\t \"wordCount\": 984,\n\t \"commentCount\": 0,\n\t \"publisher\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t },\n\t \"image\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/#primaryimage\"\n\t },\n\t \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/200521-D-IM742-2001.JPG.jpg\",\n\t \"articleSection\": [\n\t \"Cyber\",\n\t \"Daily Brief\",\n\t \"Home\",\n\t \"Newsletters\"\n\t ],\n\t \"inLanguage\": \"en-US\",\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"CommentAction\",\n\t \"name\": \"Comment\",\n\t \"target\": [\n\t \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/#respond\"\n\t ]\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"WebPage\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/\",\n\t \"name\": \"Hand-to-hand combat on computer networks: How cyber threat hunters work - C4ISRNet\",\n\t \"isPartOf\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\"\n\t },\n\t \"primaryImageOfPage\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/#primaryimage\"\n\t },\n\t \"image\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/#primaryimage\"\n\t },\n\t \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/200521-D-IM742-2001.JPG.jpg\",\n\t \"datePublished\": \"2021-01-29T18:59:45+00:00\",\n\t \"dateModified\": \"2026-08-08T18:17:28+00:00\",\n\t \"description\": \"During a major breach, the Department of Defense tasks its elite cyber protection teams to root out hackers.\",\n\t \"breadcrumb\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/#breadcrumb\"\n\t },\n\t \"inLanguage\": \"en-US\",\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"ReadAction\",\n\t \"target\": [\n\t \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/\"\n\t ]\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/#primaryimage\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/200521-D-IM742-2001.JPG.jpg\",\n\t \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/200521-D-IM742-2001.JPG.jpg\"\n\t },\n\t {\n\t \"@type\": \"BreadcrumbList\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2021\\\/01\\\/29\\\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\\\/#breadcrumb\",\n\t \"itemListElement\": [\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 1,\n\t \"name\": \"Home\",\n\t \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t \"ad_zone\": \"home\"\n\t },\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 2,\n\t \"name\": \"Cyber\",\n\t \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/\",\n\t \"ad_zone\": \"cyber\"\n\t },\n\t {\n\t \"@type\": \"ListItem\",\n\t \"position\": 3,\n\t \"name\": \"Hand-to-hand combat on computer networks: How cyber threat hunters work\"\n\t }\n\t ]\n\t },\n\t {\n\t \"@type\": \"WebSite\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t \"name\": \"C4ISRNet\",\n\t \"description\": \"Media for the Intelligence-Age Military | C4ISRNET\",\n\t \"publisher\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t },\n\t \"potentialAction\": [\n\t {\n\t \"@type\": \"SearchAction\",\n\t \"target\": {\n\t \"@type\": \"EntryPoint\",\n\t \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/?s={search_term_string}\"\n\t },\n\t \"query-input\": {\n\t \"@type\": \"PropertyValueSpecification\",\n\t \"valueRequired\": true,\n\t \"valueName\": \"search_term_string\"\n\t }\n\t }\n\t ],\n\t \"inLanguage\": \"en-US\"\n\t },\n\t {\n\t \"@type\": \"Organization\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\",\n\t \"name\": \"C4ISRNet\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t \"logo\": {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t \"caption\": \"C4ISRNet\"\n\t },\n\t \"image\": {\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t }\n\t },\n\t {\n\t \"@type\": \"Person\",\n\t \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t \"name\": \"migration\",\n\t \"image\": {\n\t \"@type\": \"ImageObject\",\n\t \"inLanguage\": \"en-US\",\n\t \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t \"caption\": \"migration\"\n\t },\n\t \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/author\\\/migration\\\/\"\n\t }\n\t ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Hand-to-hand combat on computer networks: How cyber threat hunters work - C4ISRNet","description":"During a major breach, the Department of Defense tasks its elite cyber protection teams to root out hackers.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/","og_locale":"en_US","og_type":"article","og_title":"Hand-to-hand combat on computer networks: How cyber threat hunters work","og_description":"During a major breach, the Department of Defense tasks its elite cyber protection teams to root out hackers.","og_url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/","og_site_name":"C4ISRNet","article_published_time":"2021-01-29T18:59:45+00:00","article_modified_time":"2026-08-08T18:17:28+00:00","author":"Mark Pomerleau","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Mark Pomerleau","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"Hand-to-hand combat on computer networks: How cyber threat hunters work","datePublished":"2021-01-29T18:59:45+00:00","dateModified":"2026-08-08T18:17:28+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/"},"wordCount":984,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/200521-D-IM742-2001.JPG.jpg","articleSection":["Cyber","Daily Brief","Home","Newsletters"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/","name":"Hand-to-hand combat on computer networks: How cyber threat hunters work - C4ISRNet","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/200521-D-IM742-2001.JPG.jpg","datePublished":"2021-01-29T18:59:45+00:00","dateModified":"2026-08-08T18:17:28+00:00","description":"During a major breach, the Department of Defense tasks its elite cyber protection teams to root out hackers.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/200521-D-IM742-2001.JPG.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/200521-D-IM742-2001.JPG.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2021\/01\/29\/hand-to-hand-combat-on-computer-networks-how-cyber-threat-hunters-work\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Cyber","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/","ad_zone":"cyber"},{"@type":"ListItem","position":3,"name":"Hand-to-hand combat on computer networks: How cyber threat hunters work"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","name":"C4ISRNet","description":"Media for the Intelligence-Age Military | C4ISRNET","publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/c4isrnet\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization","name":"C4ISRNet","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","caption":"C4ISRNet"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/c4isrnet\/author\/migration\/"}]}},"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/200521-D-IM742-2001.JPG.jpg","jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"C4ISRNet","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/c4isrnet","push-errors":false,"_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/23054","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/comments?post=23054"}],"version-history":[{"count":1,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/23054\/revisions"}],"predecessor-version":[{"id":23057,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/23054\/revisions\/23057"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/media?parent=23054"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/categories?post=23054"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/tags?post=23054"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/coauthors?post=23054"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}