When implemented correctly, threat hunting can help organizations stay head of threats, researcher says at RSA Conference.