Hunt 2.7 Adds Threat Indicators, IOC Visibility, and Faster Investigations

· Original article ↗

Summary

Hunt 2.7 updates its threat-hunting platform with expanded domain risk indicators, threat actor visibility on IP and domain pages, faster C2 listings and risk cards, and new AttackCapture filters and investigation pivots.

Key points

  • Domain Risk & Reputation now includes indicators for IOCs, malware, open directories, and phishing activity.
  • IOC Hunter displays threat actor information on IP and domain pages and adds hosting company data to IP results.
  • C2 listings and IP and domain risk cards have been made faster.
  • AttackCapture adds multi-value filters, open-directory summaries, linked IOC counts, and easier pivots to related listings.
  • The release also adds WHOIS registrar and creation-date details for apex domains and hostnames, plus bulk domain lookup.
  • Bug fixes address Windows flag display, ZIP extraction reporting, warning counts, tag alignment, and unknown malware ports.

Article Details

Event Type
Release of Hunt 2.7, a platform update adding investigation features, threat indicators, performance improvements, and bug fixes.
Impact
Improves the speed and usability of C2 listings, risk cards, domain searches, and AttackCapture investigations. Adds richer domain risk indicators, threat actor visibility, multi-value filters, open-directory summaries, and linked IOC counts. The article reports fixes for display, ZIP extraction, count alignment, and malware-port issues; it does not report a security incident or customer impact.

Vendors

Products

Related Articles