Hunt.io 2.2 Adds Automatic Archive Extraction, Threat-Intel Search and Splunk Integration
Summary
Hunt.io 2.2 adds automatic ZIP extraction and file search, expanded threat-intelligence datasets, consolidated IP history, a view of malicious hosting infrastructure, and Splunk integration for C2 and IOC feeds.
Key points
- AttackCapture now automatically unpacks ZIP archives, tags detected malicious files, and supports searching files by name, extension, or keyword.
- HuntSQL adds WHOIS History and Nmap datasets, richer result metadata, and lowercase certificate-hash searches.
- A new Host Radar feature displays hosting providers linked to C2 infrastructure, phishing domains, and open directories.
- The Hunt.io Splunk app provides C2 and IOC feeds, dashboards, saved searches, and automatic feed updates.
- IP history now consolidates related events and metadata, including ASN, provider, and country information.
- Other updates include improved search performance, file size and date filters, and a configurable IOC Hunter API timeout.
Article Details
- Event Type
- Security platform feature release
- Impact
- Hunt.io 2.2 adds automated ZIP extraction to surface malicious files and indicators, infrastructure and IP-history views, and Splunk feed integration. These features are intended to help security teams investigate and correlate malicious activity more efficiently.
Vendors
Products
Tools
BYOBIn the following screenshot, you can see over 3,500 malware-linked IPs hosted on DigitalOcean, tied to tools like BYOB, reNgine, and evilgophish.evilgophishIn the following screenshot, you can see over 3,500 malware-linked IPs hosted on DigitalOcean, tied to tools like BYOB, reNgine, and evilgophish.reNgineIn the following screenshot, you can see over 3,500 malware-linked IPs hosted on DigitalOcean, tied to tools like BYOB, reNgine, and evilgophish.