When is a company expected to perform threat hunting activities?

a$.$ Continuously, to know what threats the company might be exposed to

b$.$ Even if no incident has been reported, for an attacker could be active in the network

c$.$ When there is an incident, to gather as much information as possible related to the attacker

d$.$ All the other answers