Whenever you're ready, walk me through how you'd approach this.
What specific tools or frameworks do you use to perform threat hunting or incident response?