Which threat hunting technique involves analyzing system logs for unusual or suspicious activity?

{} [+]