Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Training Camp • Cybersecurity Glossary
Threat Hunting Maturity Model HMM: a five-level framework rating an organization's proactive hunting capability from automated alerting to data-driven hunting.
Threat Hunting Maturity Model (HMM) Definition: Threat Hunting Maturity Model HMM: a five-level framework rating an organization's proactive hunting capability from automated alerting to data-driven hunting.
The Threat Hunting Maturity Model HMM, introduced by David Bianco, ranks an organization's hunting capability across five levels from HMM0 to HMM4. Lower levels rely primarily on automated alerting with little or no proactive hunting, while higher levels are defined by rich data collection, advanced analytics, and the routine creation of new, automated detections from hunt findings. The model helps security teams benchmark their current capability and chart a path toward more proactive, data-driven threat detection.
Threat Hunting Maturity Model (HMM) is one of the topics you'll master in the CySA+ Boot Camp.
CySA+ Boot Camp →