Testing Handbook Skills
Security scan passedTrail of Bits' skills for fuzzing and crypto testing, from its Testing Handbook: libFuzzer, AFL++, cargo-fuzz, Atheris, OSS-Fuzz and more.
Loading listing…
dt-sec-ioc-hunting
Security scan passedHunt threat-intelligence indicators of compromise (IoCs) across Dynatrace logs and spans and produce a 0-100 threat-exp…
Part of Dynatrace
by dynatrace· SecurityUnclaimed · Yours? Claim it
What dt-sec-ioc-hunting does
About
Hunt threat-intelligence indicators of compromise (IoCs) across Dynatrace logs and spans and produce a 0-100 threat-exposure score. Extracts and normalizes IoCs — IPs, Domains (hostnames included), URLs, Emails, CVEs, File hashes (md5/sha1/sha256), MITRE TTPs — from unstructured reports, advisories, advisory URLs, pasted text, or STIX, then hunts them in fetch logs and fetch spans. Trigger: hunt these IoCs, am I exposed to this threat, check these indicators in my logs and traces, threat exposure report, extract IoCs from this advisory URL, search these hashes/domains/IPs in my environment. Routes CVE-to-vulnerability, IP/Domain/URL/MITRE-to-detection legs to dt-sec-insights. Do NOT use for: querying security.events directly (vulnerabilities, detections, compliance, THREAT_REPORT — use dt-sec-insights); general log queries not tied to an IoC hunt (use dt-obs-logs); general span/trace analysis (use dt-obs-tracing); explaining DQL syntax (use dt-dql-essentials).
Install dt-sec-ioc-hunting
Ratings and reviews
From people who use it
Ratings and reviews
Recipes with dt-sec-ioc-hunting
Step by step
Recipes with dt-sec-ioc-hunting
When a server changes its tools
Nothing new reaches your agent until a person has looked at it.
- 1Ask the live serverWe connect the way your agent does and list its tools. We never call one.
- 2Pin every toolEach tool’s name, description and input schema is hashed, so any change shows up as a diff.
- 3Read it like an attackerRules look for hidden instructions, invisible text, credential grabs, download-and-run and data leaving.
- 4Hold what failsFlagged listings are taken down until a person reviews them, new versions included.
Scanned on every change, and again when our rules improve.
More from Security
Skills people install alongside dt-sec-ioc-hunting.
