Focused Hunts
Open-Source Threat Intelligence for Every Defender
Focused Hunts publishes high-fidelity, open-source cyber threat intelligence drawn from the current state of cyber activity, from traditional threats such as ransomware and espionage to real-world AI incidents.
The goal is education. Every guide turns published research into behavior a defender can hunt for, with detection queries for Splunk and Microsoft Sentinel. Every weekly recap turns raw threat feeds into a clear picture of what happened and what to check.
The intelligence serves commercial and private defenders alike: security teams, students, researchers, small businesses and curious individuals around the world. No paywall, no sign-up and nothing to buy.
Start Hunting
Hunting
off the Red
Technical hunting guides built from current threat research. Each one maps the activity to MITRE ATT&CK and ships paired Splunk SPL and Microsoft KQL queries that target behavior, not just indicators.
Last Week
in Threats
A weekly look back at ransomware victims, newly exploited vulnerabilities and malicious infrastructure. Every figure is attributed to its source and reproducible, with a hunting takeaway and an environment sweep.
Blog
Articles
Plain-language articles on how threat hunting, monitoring and detection fit together, written for security leaders and practitioners who want the bigger picture behind the queries.
What Readers Can Expect
Cited Sources
Every claim traces back to the published research or data feed it came from, with the source named inline.
Behavioral Queries
Detection queries hunt for attacker behavior that survives infrastructure changes, and every query is checked against vendor schemas.
Traditional to AI
Coverage spans ransomware, espionage and vulnerability exploitation through to real-world AI-enabled attacks and attacks on AI systems.
Shared Frameworks
Findings use the common vocabulary of MITRE ATT&CK, so they slot into any team's existing detection program.
Open-Source Intelligence
Built from published threat research and public feeds, with every source cited. No paywall, no sign-up and no sales pitch. Read it, share it and adapt the queries to your own environment.
Vendor Neutral
Focused Hunts sells no security products or services and favors no vendor, so the analysis follows the evidence.
Tools and Further Reading
Beyond the intelligence, Focused Hunts offers The Vault, an open-source, privacy-first password manager for Windows and Android, and two books on putting AI to work in security operations.
Spot an error, have a tip, or want to suggest a topic? Corrections and feedback are always welcome.