06-threat-hunting

Use for blue-team threat hunting, detection engineering with Sigma/YARA, SIEM query design, and…

>- Hunt threat-intelligence indicators of compromise (IoCs) across Dynatrace logs and spans and…

Conduct proactive, hypothesis-driven threat hunts — search SIEM / EDR / logs for adversaries wh…

Runs a hypothesis-driven threat hunt for web shell deployment (T1505.003) on internet-facing se…

Detects credential stuffing attacks by analyzing authentication logs for login velocity anomali…