security1 publisher
72.7% of SANS hunters who caught nation-state intruders saw them abuse native admin tools
SANS's 2026 hunting survey found 72.7% of hunters who caught nation-state actors saw them living off the land, against 63.4% for ransomware crews. Hunters rank data quality as their top barrier, so detecting misused admin tools starts with the telemetry those hunts depend on.
Publishers:intel471.com
Reality
- Evidence50
- Adoption45
- Hype gap+10
- Incentives60
- Confidence50