Every The Threat Hunter Playbook Alternative & Competitor in 2026

detections.ai Detections

Community platform for sharing and creating detection rules with AI

SOC Prime Threat Detection Marketplace

Threat detection marketplace with Sigma rules for SIEM and shift-left detection

Cyborg Security HUNTER

Threat hunting platform with free hunt packages and educational resources.

TruKno

Agentic AI threat hunting platform with real-time MITRE ATT&CK intelligence.

ThreatHunting Project

A community-driven informational repository providing resources and guidance for hunting adversaries in IT environments.

Cybereason Threat Hunting

Proactive threat hunting platform for detecting and investigating attacks

Simbian AI Threat Hunt Agent

AI agent that autonomously validates threat hunt hypotheses across enterprise data

GoSecure Titan® Threat Hunting Services

Human-led threat hunting service for uncovering hidden adversaries

Gambit KnightGuard for Threat Hunting & Detection

AI-driven threat detection & hunting platform with MITRE ATT&CK analytics

Alpine Security Threat Detection

Continuous threat hunting service based on TTP analysis and EDR exploitation

ThreatScout

Federated SecOps platform for threat hunting across SIEMs, EDRs & data lakes.

CDI_yara

A collection of YARA rules for public use, built from intelligence profiles and file work.

Canadian Centre for Cyber Security CCCS YARA Specification

Define and validate YARA rule metadata with CCCS YARA Specification.

Yara Rule Generator

A tool for quick and effective Yara rule creation to isolate malware families and malicious objects.

YLS Language Server for YARA Language

YLS Language Server for YARA Language with comprehensive features and Python 3.8 support.

EQL Analytics Library

A library of event-based analytics written in EQL to detect adversary behaviors identified in MITRE ATT&CK, providing detection rules for the Elastic Stack.

Falco Rules

A repository of officially managed detection rules for the Falco runtime security monitoring system that identifies threats, abnormal behaviors, and compliance violations through syscall and container event analysis.

YARA-Signatures

A collection of public YARA signatures for various malware families.

Oriana

Threat hunting tool leveraging Windows events for identifying outliers and suspicious behavior.

Alerting and Detection Strategies Framework

A framework for improving detection strategies and alert efficacy.

Unfetter

Unfetter is a reference implementation framework that collects events from client machines and performs CAR analytics using an ELK stack with Apache Spark to detect potential adversary activity.

Akamai Hunt

Managed threat hunting service detecting evasive threats in network environments

Binary Defense Threat Hunting

A managed security service that uses hypothesis-based threat hunting to proactively discover hidden threats, create new detection rules, and improve overall security posture.

Censys Threat Hunting

Proactive threat hunting platform for detecting adversary infrastructure

Prophet Security Prophet AI Threat Hunter

AI-driven threat hunting platform for SOC alert triage and investigation

Axur Threat Hunting

Threat hunting platform for credentials, phishing, malicious domains & leaks

Legato Security Managed Threat Hunting Services

Managed threat hunting service combining ML analytics and human expertise

Searchlight Cyber Stealth Browser

Virtual machine for secure, anonymous dark web investigation via Tor and I2P

Constella Hunter

Deep OSINT investigation tool for threat actor attribution and analysis

Zscaler Threat Hunting

Managed threat hunting service with 24/7 expert hunters and AI-powered analysis

Armantec Cyber Threat Hunting

Proactive threat hunting service using threat intel and red team assessments

Hypernative Platform

Real-time monitoring & automated response for blockchain/Web3 security threats

Exaforce Exabot Investigate

Natural language threat hunting and investigation platform for SOC teams

Arc4dia SNOW

Covert proactive threat hunting platform with remote freeze & forensic analysis.

Brier & Thorn Threat Hunting & Correlation

Managed threat hunting & correlation service with expert analysts.

PacketWatch Managed Threat Hunting

Managed service with human analysts hunting threats across client networks.

Query.AI Federated Detections

Runs security detections across distributed data sources without SIEM ingestion.

ShadowDragon Horizon Platform

Enterprise OSINT platform for identity, investigation, and threat monitoring.

ShadowDragon Horizon Monitor

Continuous OSINT monitoring platform tracking identities, keywords & topics.

Stairwell

File analysis & threat intel search engine for SOC and IR teams.

Stairwell Variant Discovery

Expands a single malware hash into full family visibility via structural analysis.

Grep App

Search engine for open-source Git repositories with advanced features like case sensitivity and regular expressions.

Cyber Threat Hunting

A collection of tools and resources for threat hunters.

Sentinel ATT&CK

A threat hunting capability that leverages Sysmon and MITRE ATT&CK on Azure Sentinel

YaraDbg

A free web-based Yara debugger for security analysts to write hunting or detection rules with ease.

Community Security Analytics (CSA)

A community-driven repository of pre-built security analytics queries and rules for monitoring and detecting threats in Google Cloud environments across various log sources and activity types.

yara-rust

Bindings for the Yara library from VirusTotal with support for Yara v4.2 and various features like rule compilation and scanning.

OSINT Omnibus

An interactive command line application for Open Source Intelligence collection and artifact management that enables investigation of IP addresses, domains, email addresses, file hashes, and other digital artifacts.