threat-hunting

Guides threat hunts from testable hypotheses to validated detections and documented conclusions.

When to use it

Use for blue-team threat hunting, Sigma/YARA detection engineering, SIEM query design, and incident detection validation.

Give it a threat-hunting request and scoped security data; it returns a hypothesis status and evidence identifiers.