THOR Collective Dispatch
Subscribe
Sign in
Home
Podcast
Notes
Archive
Leaderboard
About
Latest
Top
Discussions
Dispatch Debrief: October 2025
Seven Dispatch drops that prove hunting smarter beats hunting harder.
Oct 30
•
Sydney Marrone
4
From the Fire: Q3FY25
Living off the land, hiding in plain sight, and outsmarting controls.
Oct 23
•
Lauren Proehl
11
1
Aligning Risk Management and Threat-Informed Defense Practices (Part 1)
Cybersecurity is a complex field full of unique, specialized disciplines.
Oct 16
•
Micah VanFossen
9
Sliver Armory in Action: Bringing Sliver Armory BOFs to Purple Teaming
When I first wrote about Sliver beacons in purple teaming, the point was simple: implants aren’t just red-team toys, they’re teaching tools for…
Oct 14
•
John Grageda
9
Hunting Beyond Indicators
Indicators of Compromise (IOCs) are a powerful tool for security analysts and researchers to identify, track, and discover threat actor infrastructure…
Oct 9
•
Sam Hanson
18
The Shape of Time: Mastering timechart
SPL Dispatch #3 - 10/07/2025
Oct 7
•
Sydney Marrone
12
Agentic Threat Hunting, Part 2: Starting a Hunt Repo
The first trick to scaling hunting? Give your AI a treat: a repo.
Oct 2
•
Sydney Marrone
15
Ask-a-Thrunt3r: September 2025 Recap 🐏
Mainly ramblings. And maybe some wisdom.
Oct 1
•
Lauren Proehl
,
Sydney Marrone
, and
John Grageda
11
48:31
September 2025
Dispatch Debrief: September 2025
Baselines: the thrunter’s compass. Here’s how we used them this month.
Sep 26
•
Sydney Marrone
6
Baseline Bonanza: Ten Baseline Hunts You Should Do (and How to Do Them)
Because attackers hide in plain sight... until you know what's normal.
Sep 23
•
Lauren Proehl
13
Beyond Hackers in Hoodies: A Project Manager’s Move into Cybersecurity
Lessons on transferable skills, team alignment, and process improvement from engineering to security
Sep 16
•
Courtney Shar
7
Even if many plugins are fine, the bad ones are BAD
Sydney recently wrote a great piece about extensions and hunting for IDE plugins.
Sep 12
•
John Tuckner
12
4
This site requires JavaScript to run correctly. Please
turn on JavaScript
or unblock scripts
