Read Rishi Bhargava’s article about threat hunting on Infosec Magazine :

Three things are required before an adversary can be considered a threat: opportunity, intent and capability to cause harm. No cybersecurity system is impenetrable or capable of recognizing or stopping every potential threat.

Read his full article here.