Effective and efficient threat hunting is complex, and relies on a threat hunting team with deep expertise. They should have a deep understanding of infrastructure so that they can create accurate baselines to detect outliers. They also need to understand the context of forensic evidence and which indicators to hunt for to find specific adversaries and kinds of attacks. Finally, threat hunting teams should be comfortable with reading a wide range of data from highly detailed logs and security systems.