Hunt Information | Details |
---|---|
Hypothesis | [Insert hypothesis here] |
Threat Hunter Name | [Name of the threat hunter] |
Date | [Date of hunt] |
Requestor | [Person or team requesting the hunt] |
Timeframe for hunt | [Expected duration for the hunt] |
Adversary | Behavior | Location | Examples |
---|---|---|---|
[Insert adversary] | [Insert observed or expected behavior] | [Where this behavior is expected or found] | [Examples of similar behaviors/incidents] |
Role | Ticket and Other Details |
---|---|
SOC/IR | [Insert related ticket or incident details] |
Threat Intel (TI) | [Insert related ticket or incident details] |
Detection Engineering (DE) | [Insert related ticket or incident details] |
Red Team / Pen Testing | [Insert related ticket or incident details] |
Other | [Insert related ticket or incident details] |
- [Insert reference link]
- [Insert reference link]