Active threat hunting. Not alert watching.

Traditional SOC reacts to alerts. Globaltech SOC operates by hunting hypotheses every week, because patient actors do not trigger alerts.