Hunt 2.5 Adds Threat-Intelligence Pivots and a Downloadable Phishing Feed

Summary

Hunt 2.5 adds related-artifact pivots, more TLS certificate fields, a downloadable phishing feed, and SHA256 pivoting for phishing kits, alongside SAML updates and bug fixes.

Key points

• The new Pivots table links IP records to related artifacts, including certificate subjects, certificate hashes, and TLS fingerprints, with options to continue searches.
• HuntSQL adds an “Add to Query” control and supports more than 50 TLS certificate fields alongside HTTP data.
• A downloadable phishing feed includes details such as malicious URLs, first-seen times, status, brand tags, and phishing-kit information when available.
• Phishing-kit SHA256 links open a page with related extracted-file information.
• The release updates the IP database and SAML integration, and fixes URL parsing and query memory-limit error handling.

Vendors

Products

Related Articles

• Hunt.io Recaps 2025 Threat-Hunting Platform Updates and ResearchAttackCapture · HuntSQL
• Hunt 2.6 Adds IP Risk and Reputation Data and Expands IOC HuntingAttackCapture · HuntSQL
• Hunt 2.4 Adds Phishing Kit Details and Expanded Threat-Hunting SearchAttackCapture · HuntSQL
• Hunt 2.3 Adds Phishing Investigation, IOC Enrichment and SAML SSOAttackCapture · HuntSQL
• Hunt.io 2.2 Adds Automatic Archive Extraction, Threat-Intel Search and Splunk IntegrationAttackCapture · HuntSQL