Find hidden threats in your security telemetry.
Guides proactive threat hunts to produce prioritized hypotheses, IOC sweep plans, and behavioral anomaly findings.
When to use it
Use when hunting threats, analyzing indicators of compromise, or detecting behavioral anomalies in telemetry.
Give it a hunting hypothesis or IOC and telemetry files; it returns hypothesis priorities, sweep plans, or anomaly findings.
What you provide
Requires Python 3 to run the bundled threat signal analyzer.
Requires read access to SIEM telemetry for environment-level hunting.
This skill
TI provider
Submits false-positive IOCs
threat intelligence feeds
Reviews threat intelligence feeds