Lightlines
By dynatrace

dt-sec-ioc-hunting

dynatrace910 installs

Find threat indicators in your Dynatrace data.

What it does

Finds threat indicators in Dynatrace logs, spans, and security events and produces an evidence-backed threat-exposure report.

When to use it

Use to extract threat indicators from advisories, hunt them in telemetry, or assess an environment's threat exposure.

How to use it

Give it threat indicators or an advisory; it hunts for evidence in Dynatrace and returns a structured exposure report.

What you provide

  • indicators or a threat advisory

Uses

Latest review

What you need · 4

Requires a Dynatrace environment with accessible telemetry; IP, domain, and URL hunts must query logs, spans, and detections.

Must be loaded first to supply the DQL syntax and query-construction patterns required by the hunt templates.


Access · 2

This skill

Dynatrace

Read

Searches your Dynatrace telemetry

advisory pages

Read

Fetches threat advisory pages