threat-hunter

What problem does it solve?

This Skill automates proactive threat hunting to detect and investigate advanced threats that may have bypassed existing security controls.

Core Features & Use Cases

• Hypothesis-driven hunts: Leverages MITRE ATT&CK, threat intelligence, and behavioral anomalies.
• IOC Sweeps: Regularly scans for known indicators of compromise across various log sources.
• Adversary Emulation: Facilitates purple team exercises to test detection and response capabilities.
• Use Case: Automatically initiate a hunt for new TTPs observed in recent threat intelligence reports to find potential compromises before they escalate.

Quick Start

Initiate a threat hunting sprint for new indicators of compromise.