Every plan
v0.1.2
by Huntbase
ARTEX AI-Driven Intrusion
Detect and hunt intrusions by ARTEX, the AI attack framework, and attackers that work like it. Schedules checks for ARTEX web shells and marker files, attack tooling and tunnels, container escapes, unexpected CI runners, planted backdoor accounts and coding agents running without permission checks on your endpoints; ARTEX user agents and addresses, CloudWatch Logs searches for secrets and Cognito sign-up abuse in AWS; runner registrations in GitHub; ARTEX pods and new privileged pods in Kubernetes; and Cloudflare rules that trust a user agent. Brings the Hub hunts for ARTEX and its techniques and an AI-driven intrusion review report template.
What's inside
-
51 queries
-
7 detections
-
20 hunts
-
3 playbooks
-
5 integrations
-
1 report template
Names, queries and logic are available in the platform once you sign up.
More packs
- Identity Threats · 249 queries
- AI Security · 126 queries
- Windows detections for Axiom · 7 detections
- Splunk CIM field mapping · 1 integration
- ISO 27001 · 38 compliance checks
- NIS2 · 38 compliance checks
- SOC 2 · 37 compliance checks
- Cyber Essentials · 26 compliance checks
- All packs →