312-39V2: Certified SOC Analyst v2

As a Threat Hunter at a Cyber Security company, you observe that several endpoints in the organization are generating unusual outbound traffic to an unfamiliar IP address. The traffic is encrypted and appears in small bursts at irregular intervals. No known IoCs are associated with the destination, and traditional security tools have not identified it as malicious. You decide to start a threat-hunting initiative to establish whether this could be an advanced persistent threat (APT) employing sophisticated techniques to evade detection. The objective is to identify potential Indicators of Attack (IoAs) and map them to known adversary behaviors. What type of threat-hunting approach would be appropriate for this situation?