Hunt 2.3 Adds Phishing Investigation, IOC Enrichment and SAML SSO

Summary

Hunt 2.3 updates its threat-hunting platform with phishing investigation workflows, bulk domain enrichment for C2s and IOCs, analyst notes and observations, HuntSQL guidance and downloads, and SAML 2.0 SSO support.

Key points

• Phishing intelligence now has a dedicated section for overviews, actors and kits.
• Bulk domain enrichment adds C2s, open directories and IOCs; domain results also show apex domains alongside extracted IPs.
• AttackCapture adds analyst notes, a directory of noted hosts and editorial observations to help prioritize investigations.
• HuntSQL adds example queries, single-record JSON or CSV downloads, and a time-zone cheat sheet.
• The platform now supports SAML 2.0 SSO for organizations.
• The release also includes interface updates and fixes, including correcting IOCs with links that were not defanged.

Vendors

Products

Related Articles

• Hunt.io Recaps 2025 Threat-Hunting Platform Updates and ResearchAttackCapture · HuntSQL
• Hunt 2.6 Adds IP Risk and Reputation Data and Expands IOC HuntingAttackCapture · HuntSQL
• Hunt 2.5 Adds Threat-Intelligence Pivots and a Downloadable Phishing FeedAttackCapture · HuntSQL
• Hunt 2.4 Adds Phishing Kit Details and Expanded Threat-Hunting SearchAttackCapture · HuntSQL
• Hunt.io 2.2 Adds Automatic Archive Extraction, Threat-Intel Search and Splunk IntegrationAttackCapture · HuntSQL