what is the first step in the threat hunting process?profile threat actors.establish an hypothesis.improve detection capabilities.reduce attack surface area.