Threat Hunting

Full-fidelity packet capture & forensics module for network threat hunting

Managed threat hunting service combining ML analytics and human expertise

Human-led threat hunting service for uncovering hidden adversaries

Threat hunting platform for credentials, phishing, malicious domains & leaks

Managed threat hunting service for network activity monitoring and analysis

AI agent that autonomously validates threat hunt hypotheses across enterprise data

AI-driven threat hunting platform for SOC alert triage and investigation

Community platform for sharing and creating detection rules with AI

Proactive threat hunting platform for detecting adversary infrastructure

Proactive threat hunting platform for detecting and investigating attacks

Akamai Hunt is a managed threat hunting service that detects and remediates evasive security risks in network environments using data analysis, AI, and expert investigation.

Kunai is a Linux-based system monitoring tool that provides real-time monitoring and threat hunting capabilities.

A tool for adding new lines to files, skipping duplicates.

A tool for identifying potential security threats by fetching known URLs and filtering out URLs with open redirection or SSRF parameters.

A comprehensive resource for threat hunting in Active Directory environments, covering tracking command-line/PowerShell activity, Kerberoasting detection, auditing attacker activity, and monitoring enterprise command-line activity.

A powerful OSINT tool for creating custom templates for data extraction and analysis

A repository of officially managed detection rules for the Falco runtime security monitoring system that identifies threats, abnormal behaviors, and compliance violations through syscall and container event analysis.

YLS Language Server for YARA Language with comprehensive features and Python 3.8 support.

A repository of freely usable Yara rules for detection systems, with automated error detection workflows.

Modular Threat Hunting Tool & Framework

A free and open-source OSINT framework for gathering and analyzing data from various sources

A collection of tools and resources for threat hunters.

A Go client to communicate with Chaos DB API

A free web-based Yara debugger for security analysts to write hunting or detection rules with ease.