skills.rest
Fabric-Pro
Fabric-ProOFFICIAL
Explore all skills by this author →
WebsiteGitHub

threat-hunting

Detect security threats, vulnerabilities, and suspicious patterns in applications and infrastructure.

3|Updated Aug 26, 2026
Search Tags:#penetration testing#security audit#log analysis#vulnerability detection#anomaly detection#threat hunting#mitre att&ck
One-click install
npx skills add https://github.com/Fabric-Pro/fabric-oss --skill threat-hunting-fabric-pro
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: threat-hunting
Source: https://github.com/Fabric-Pro/fabric-oss/tree/main/.cursor/skills/threat-hunting
Command: npx skills add https://github.com/Fabric-Pro/fabric-oss --skill threat-hunting-fabric-pro

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Security threats often go unnoticed until they cause damage. This Skill helps you proactively search for vulnerabilities, suspicious access patterns, and misconfigurations in applications and infrastructure before attackers exploit them. ## Core Features & Use Cases - Threat Pattern Detection: Identify unusual network traffic, failed authentication attempts, privilege escalation, and data exfiltration indicators. - Security Audits & Log Analysis: Review authentication logs and security events to detect anomalous behavior and potential breaches. - Use Case: During a security review of a web application, use this Skill to analyze access logs for repeated failed login attempts and privilege escalation patterns, then map findings to MITRE ATT&CK techniques for reporting. ## Quick Start Ask the AI to analyze the application's authentication logs for suspicious patterns such as failed login attempts and privilege escalation.

Frequently Asked Questions about threat-hunting

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect suspicious patterns in security logs?▼

Analyze authentication and access logs for indicators like repeated failed login attempts, unusual access times, and privilege escalation events. This Skill guides the review of these patterns and maps findings to known threat behaviors.

What is threat hunting in cybersecurity?▼

Threat hunting is the proactive search for security threats, vulnerabilities, and suspicious patterns before they cause damage. It involves analyzing logs, network traffic, and system behavior rather than waiting for automated alerts.

What patterns indicate a potential security breach?▼

Common indicators include unusual network traffic, repeated failed authentication attempts, unexpected privilege escalation, and signs of data exfiltration. These patterns are core detection targets covered by this Skill.

Can threat hunting help with penetration testing?▼

Yes, threat hunting complements penetration testing by identifying attack surfaces and security misconfigurations. It also supports implementing ongoing security monitoring after testing reveals vulnerabilities.

What is the MITRE ATT&CK framework used for?▼

MITRE ATT&CK is a knowledge base of adversary tactics and techniques used to classify and understand attack behaviors. This Skill references it as a resource for categorizing detected threats and building detection strategies.

Related Skills

Explore More Software Engineering Skills→
bpnrockstarbpnrockstar

hunt-sqli

Detect SQL injection vulnerabilities in web applications via source code, responses, and traffic.

Community
Advanced
WhaleylawWhaleylaw

security-incident-specialist

Investigate and contain security incidents in production systems.

Community
Advanced
zangxin75zangxin75

security-monitor

Monitors Clawdbot deployments for intrusions and anomalous credential usage.

Community
Advanced
starwreckntxstarwreckntx

Intrusion Detection Agent

Detect intrusions by correlating alerts and analyzing attack patterns in networked environments.

Community
Basic