Hunt 2.0 Adds Threat-Actor IOC Data, C2 Feeds, and Analysis Features
Summary
Hunt 2.0 adds threat-actor IOCs sourced from 200 research blogs, IP history and association tools, SQL and API capabilities, expanded enrichment, and C2-feed integrations for Cyware and OpenCTI.
Key points
- The update introduces a threat-actor feature with IOCs from 200 public research sources, reviewed by a human.
- New IP search and visual history features show associations and changes over time.
- HuntSQL supports queries, large dataset downloads, and CSV or JSON exports; new API endpoints expand access to platform data.
- Bulk extraction and enrichment now support indicators including IP addresses, domains, hostnames, and SHA256 hashes.
- Cyware and OpenCTI integrations enable ingestion of Hunt's C2 feed.
Article Details
- Event Type
- Hunt 2.0 product release introducing updated threat-analysis features, expanded data and API capabilities, and Cyware and OpenCTI integrations.
- Impact
- Provides security teams with improved threat hunting and analysis capabilities, including threat-actor IOC access, C2 feeds, IP enrichment, SQL querying, and integrations for ingesting C2 intelligence.