Great article. We've been running ATHF since January and it's really helped improve our threat hunting process. It has helped speed up hunts and report writing, assisted with queries, tied hunts together, helped CTI flow into hunts more efficiently, and has showed us where our gaps are in the MITRE ATT&CK Framework. Still a lot more we can go to continue to improve.
This is a good, well-rounded approach to the news of Mythos. The difficulty is stopping the FUD from infecting the decision makers. Folks are worried about complex 0-days while operating flat networks and EOL software.
Another insightful article. I also looked into the ATHF from here, and it's impressive! It's definitely worth looking into if you're wanting to start using AI in your Thrunting.
Great article. We've been running ATHF since January and it's really helped improve our threat hunting process. It has helped speed up hunts and report writing, assisted with queries, tied hunts together, helped CTI flow into hunts more efficiently, and has showed us where our gaps are in the MITRE ATT&CK Framework. Still a lot more we can go to continue to improve.
Let me know if you ever want to chat. Would love to hear any and all feedback regarding ATHF!
This is a good, well-rounded approach to the news of Mythos. The difficulty is stopping the FUD from infecting the decision makers. Folks are worried about complex 0-days while operating flat networks and EOL software.
Can always count on the THOR team to bring about a calm logic to an excitable issue
One note re: the HEARTH website (which is awesome) - in the "What Can I Hunt?" tab, any hunt I select, "View hypothesis" returns a 404 (https://hearth.thorcollective.com/Embers/B015.md)
oh no! thank you for pointing this out. will update here when i get a fix in.
This has been fixed!
Another insightful article. I also looked into the ATHF from here, and it's impressive! It's definitely worth looking into if you're wanting to start using AI in your Thrunting.