How would you hunt for an Advanced Persistent Threat (APT) that has bypassed traditional signature-based defenses?