hunt-apt

What problem does it solve?

Hunts for APTs by consolidating threat intelligence from GTI, cross-referencing with SIEM results, and documenting findings to accelerate threat assessment.

Core Features & Use Cases

• GTI-based threat actor profiling: Retrieve collection reports, MITRE tree, and timeline for the target actor.
• IOC and TTP discovery: Identify IOCs and MITRE techniques related to the actor and search SIEM for matches.
• Documentation & reporting: Compile findings into a structured hunt report with both positive and negative results.
• Use Case: Use when you have threat actor name or GTI collection ID to initiate a targeted hunt.

Quick Start

Provide a threat actor name or GTI collection ID to start the hunt and produce a findings report.