Why is anomaly detection considered a proactive threat hunting technique?

Why is anomaly detection considered a proactive threat hunting technique?
A . Because it only reacts to identified threats
B . Because it relies on known IOCs
C . Because it detects deviations from normal behavior
D . Because it requires a response from the SOC

View Answer

Answer: C