A security operations manager wants to build out an internal threat-hunting capability. Which of the following should be the first priority when creating a thre...