ThreatHunting

ThreatHunting is a Splunk application designed to assist cybersecurity professionals in conducting threat hunting using MITRE ATT&CK mappings. It features over 130 reports and dashboards to analyze sysmon data, enabling users to investigate initial threat indicators effectively. The tool requires integration with Sysmon data and is designed for customization to fit specific environments, fostering collaboration with system administrators for more accurate threat detection.