https://hub.huntbase.io/2026-09-21 https://hub.huntbase.io/hunts/proxy-obscured-identity-endpoint-correlation/2026-09-21 https://hub.huntbase.io/hunts/rapid-identity-breakout-exfiltration/2026-09-21 https://hub.huntbase.io/hunts/endpoint-to-cloud-phased-intrusion-hunt/2026-09-20 https://hub.huntbase.io/hunts/multi-hop-proxy-tor-activity/2026-09-20 https://hub.huntbase.io/hunts/multi-hop-proxy-identity-triage/2026-09-20 https://hub.huntbase.io/hunts/managed-access-tenant-integrity/2026-09-20 https://hub.huntbase.io/hunts/network-proxy-relay-obfuscation/2026-09-20 https://hub.huntbase.io/hunts/vulnerable-driver-exploitation-kernel-escalation/2026-09-20 https://hub.huntbase.io/hunts/cloud-workload-identity-network-triage/2026-09-20 https://hub.huntbase.io/hunts/cloud-workload-runtime-exploitation-behavior/2026-09-20 https://hub.huntbase.io/hunts/edge-ai-artifact-integrity-exfiltration/2026-09-20 https://hub.huntbase.io/hunts/appliance-persistence-identity-abuse/2026-09-20 https://hub.huntbase.io/hunts/collaboration-platform-phishing-and-execution/2026-09-20 https://hub.huntbase.io/hunts/build-time-execution-secret-harvesting/2026-09-20 https://hub.huntbase.io/hunts/aws-cloud-identity-takeover-chain/2026-09-20 https://hub.huntbase.io/hunts/endpoint-data-staging-exfiltration/2026-09-20 https://hub.huntbase.io/hunts/identity-cloud-pivot-web-exploits/2026-09-20 https://hub.huntbase.io/hunts/linux-fileless-in-memory-execution/2026-09-20 https://hub.huntbase.io/hunts/kubernetes-service-account-abuse-and-escape/2026-09-20 https://hub.huntbase.io/hunts/ai-themed-social-engineering-multi-stage-fraud/2026-09-20 https://hub.huntbase.io/hunts/linux-ebpf-rootkit-execution-manipulation/2026-09-20 https://hub.huntbase.io/hunts/ad-rms-discovery-recon/2026-09-20 https://hub.huntbase.io/hunts/multi-stage-intrusion-ransomware-triage/2026-09-20 https://hub.huntbase.io/hunts/commodity-loader-ppi-activity/2026-09-20 https://hub.huntbase.io/hunts/knight-office-token-theft-persistence/2026-09-20 https://hub.huntbase.io/hunts/knight-office-delivery-redirection/2026-09-20 https://hub.huntbase.io/hunts/entra-id-agent-user-impersonation-teams-abuse/2026-09-20 https://hub.huntbase.io/hunts/chrysalis-dll-side-loading-execution/2026-09-20 https://hub.huntbase.io/hunts/bitb-phishing-rogue-rmm-persistence/2026-09-20 https://hub.huntbase.io/hunts/bulk-directory-discovery-aad-graph/2026-09-20 https://hub.huntbase.io/hunts/errtraffic-wordpress-infrastructure-compromise/2026-09-20 https://hub.huntbase.io/hunts/sonicwall-sma-zero-day-exploitation/2026-09-20 https://hub.huntbase.io/hunts/spiffe-spire-identity-spoofing/2026-09-20 https://hub.huntbase.io/hunts/industrial-scale-ai-distillation-extraction/2026-09-20 https://hub.huntbase.io/hunts/anomalous-cloud-identity-behavior/2026-09-20 https://hub.huntbase.io/hunts/public-app-exploitation-cloud-identity-drift/2026-09-20 https://hub.huntbase.io/hunts/wmi-lateral-movement-proxy-c2/2026-09-20 https://hub.huntbase.io/hunts/bypass-npm-cooldown-dependency-compromise/2026-09-20 https://hub.huntbase.io/hunts/obfuscated-identity-host-access/2026-09-20 https://hub.huntbase.io/hunts/macsync-binary-persistence-tampering/2026-09-20 https://hub.huntbase.io/hunts/macsync-scripted-execution-credential-theft/2026-09-20 https://hub.huntbase.io/hunts/malicious-c2-infrastructure-polling/2026-09-20 https://hub.huntbase.io/hunts/cross-platform-malware-execution-persistence/2026-09-20 https://hub.huntbase.io/hunts/ai-impersonation-script-execution-data-theft/2026-09-20 https://hub.huntbase.io/hunts/ai-platform-mediated-malvertising-redirection/2026-09-20 https://hub.huntbase.io/hunts/tampered-exodus-persistence-c2/2026-09-20 https://hub.huntbase.io/hunts/chaindrop-worm-persistence-propagation/2026-09-20 https://hub.huntbase.io/hunts/chaindrop-npm-worm-activity/2026-09-20 https://hub.huntbase.io/hunts/kimwolf-blockchain-c2-ddos-impact/2026-09-20 https://hub.huntbase.io/hunts/kimwolf-adb-propagation-evasion/2026-09-20 https://hub.huntbase.io/hunts/spring-ring-ntlm-relay-rat-c2/2026-09-20 https://hub.huntbase.io/hunts/teams-vishing-payload-execution/2026-09-20 https://hub.huntbase.io/hunts/systembc-c2-ftp-exfiltration/2026-09-20 https://hub.huntbase.io/hunts/identity-based-lateral-movement-and-credential-access/2026-09-20 https://hub.huntbase.io/hunts/earthtime-trojan-ransomware-recon/2026-09-20 https://hub.huntbase.io/hunts/it-support-impersonation-winrm-lateral/2026-09-20 https://hub.huntbase.io/hunts/abuse-trusted-binaries-payload-delivery/2026-09-20 https://hub.huntbase.io/hunts/interaction-bec-lookalike-infrastructure/2026-09-20 https://hub.huntbase.io/hunts/adversary-operational-workflow-ai-automation/2026-09-20 https://hub.huntbase.io/hunts/sharepoint-unauthenticated-rce-chain/2026-09-20 https://hub.huntbase.io/hunts/shai-hulud-exfiltration-deadman/2026-09-20 https://hub.huntbase.io/hunts/shai-hulud-secret-harvesting-discovery/2026-09-20 https://hub.huntbase.io/hunts/shai-hulud-supply-chain-loader/2026-09-20 https://hub.huntbase.io/hunts/regulated-industry-phishing-ransomware-chain/2026-09-20 https://hub.huntbase.io/hunts/ai-crafted-phishing-multi-hop-proxies/2026-09-20 https://hub.huntbase.io/hunts/exploit-multi-hop-proxy-c2/2026-09-20 https://hub.huntbase.io/hunts/suspicious-ingress-tool-transfer-native-utilities/2026-09-20 https://hub.huntbase.io/hunts/phishing-multi-hop-proxy-detection/2026-09-20 https://hub.huntbase.io/hunts/automated-triage-reproduction-monitoring/2026-09-20 https://hub.huntbase.io/hunts/exploitation-obfuscated-c2-patch-window/2026-09-20 https://hub.huntbase.io/hunts/external-access-multi-hop-proxy-c2/2026-09-20 https://hub.huntbase.io/hunts/ai-coding-agent-tool-call-auditing/2026-09-20 https://hub.huntbase.io/hunts/oysterloader-multistage-execution-c2-discovery/2026-09-20 https://hub.huntbase.io/hunts/entra-id-assistive-agent-impersonation/2026-09-20 https://hub.huntbase.io/hunts/threat-intelligence-lifecycle-detection/2026-09-20 https://hub.huntbase.io/hunts/unicode-smuggling-phishing-evasion/2026-09-20 https://hub.huntbase.io/hunts/linux-lpe-behavioral-chain/2026-09-20 https://hub.huntbase.io/hunts/amos-stealer-c2-exfiltration-patterns/2026-09-20 https://hub.huntbase.io/hunts/amos-stealer-macos-phased/2026-09-20 https://hub.huntbase.io/hunts/interactive-remote-access-support-tool-abuse/2026-09-20 https://hub.huntbase.io/hunts/unk-deaddrop-credential-wallet-theft/2026-09-20 https://hub.huntbase.io/hunts/third-party-integration-oauth-abuse-api-exfiltration/2026-09-20 https://hub.huntbase.io/hunts/voidlink-lateral-scanning-mesh-c2/2026-09-20 https://hub.huntbase.io/hunts/voidlink-exploitation-and-kernel-deployment/2026-09-20 https://hub.huntbase.io/hunts/static-tundra-cisco-ios-post-exploitation/2026-09-20 https://hub.huntbase.io/hunts/vulnerable-cisco-asset-exposure/2026-09-20 https://hub.huntbase.io/hunts/flutter-supply-chain-build-execution/2026-09-20 https://hub.huntbase.io/hunts/ai-infra-monetization-persistence/2026-09-20 https://hub.huntbase.io/hunts/ai-gateway-exploitation-credential-theft/2026-09-20 https://hub.huntbase.io/hunts/papercut-ng-mf-pre-auth-rce-exploitation/2026-09-20 https://hub.huntbase.io/hunts/d2ip-malware-obfuscated-http-exfiltration/2026-09-20 https://hub.huntbase.io/hunts/aeternum-blockchain-c2-exfiltration/2026-09-20 https://hub.huntbase.io/hunts/aeternum-loader-persistence-execution/2026-09-20 https://hub.huntbase.io/hunts/ai-agentic-escalation-infrastructure-hijacking/2026-09-20 https://hub.huntbase.io/hunts/automated-service-infiltration-data-harvesting/2026-09-20 https://hub.huntbase.io/hunts/endpoint-ai-assisted-scripting-credential-dumping/2026-09-20 https://hub.huntbase.io/hunts/interlock-rat-c2-rdp-lateral-movement/2026-09-20 https://hub.huntbase.io/hunts/interlock-rat-endpoint-execution-recon/2026-09-20 https://hub.huntbase.io/hunts/akira-ransomware-credential-access/2026-09-20 https://hub.huntbase.io/hunts/bumblebee-recon-privileged-persistence/2026-09-20 https://hub.huntbase.io/hunts/bumblebee-seo-poisoning-sideloading/2026-09-20 https://hub.huntbase.io/hunts/chaindrop-discovery-and-propagation/2026-09-20 https://hub.huntbase.io/hunts/chaindrop-host-worm-execution/2026-09-20 https://hub.huntbase.io/hunts/clickfix-dll-sideloading-infostealer-injection/2026-09-20 https://hub.huntbase.io/hunts/revstealer-credential-theft-impact/2026-09-20 https://hub.huntbase.io/hunts/gta6-hype-rat-c2-data-theft/2026-09-20 https://hub.huntbase.io/hunts/gta6-malicious-installer-wiper-activity/2026-09-20 https://hub.huntbase.io/hunts/ad-rms-key-extraction-offline-decryption/2026-09-20 https://hub.huntbase.io/hunts/m365-graph-exfiltration-recon/2026-09-20 https://hub.huntbase.io/hunts/active-storage-libvips-exploitation/2026-09-20 https://hub.huntbase.io/hunts/cve-2026-31431-copy-fail-lpe/2026-09-20 https://hub.huntbase.io/hunts/teampcp-credential-validation-discovery/2026-09-20 https://hub.huntbase.io/hunts/verdantbamboo-stolen-credential-pivot/2026-09-20 https://hub.huntbase.io/hunts/verdantbamboo-edge-appliance-post-exploitation/2026-09-20 https://hub.huntbase.io/hunts/faronics-deploy-abuse-rmm/2026-09-20 https://hub.huntbase.io/hunts/persistent-node-js-backdoor-activity/2026-09-20 https://hub.huntbase.io/hunts/kremlin-loader-extension-forgery/2026-09-20 https://hub.huntbase.io/hunts/endpoint-credential-harvesting-dumping/2026-09-20 https://hub.huntbase.io/hunts/identity-authentication-account-abuse/2026-09-20 https://hub.huntbase.io/hunts/nextgen-mirth-connect-exploitation-exfiltration/2026-09-20 https://hub.huntbase.io/hunts/orthanc-dicom-vulnerability-exploitation/2026-09-20 https://hub.huntbase.io/hunts/wp2shell-rce-lateral-movement/2026-09-20 https://hub.huntbase.io/hunts/wordpress-core-rest-api-rce-wp2shell/2026-09-20 https://hub.huntbase.io/hunts/ta488-owa-xss-owareaper-network/2026-09-20 https://hub.huntbase.io/hunts/iclickfix-netsupport-execution-persistence/2026-09-20 https://hub.huntbase.io/hunts/iclickfix-web-redirection-delivery/2026-09-20 https://hub.huntbase.io/hunts/abused-rmm-network-infrastructure/2026-09-20 https://hub.huntbase.io/hunts/unc6201-network-evasion-c2/2026-09-20 https://hub.huntbase.io/hunts/dell-recoverpoint-intrusion-persistence/2026-09-20 https://hub.huntbase.io/hunts/uat-10147-host-elevation-and-evasion/2026-09-20 https://hub.huntbase.io/hunts/web-exploit-telemetry-theft-uat-10147/2026-09-20 https://hub.huntbase.io/hunts/muddyrot-custom-implant-lifecycle/2026-09-20 https://hub.huntbase.io/hunts/rmm-c2-redundancy/2026-09-20 https://hub.huntbase.io/hunts/rogue-screenconnect-host-execution-persistence/2026-09-20 https://hub.huntbase.io/hunts/rmm-endpoint-lateral-movement-masquerading/2026-09-20 https://hub.huntbase.io/hunts/n-central-web-exploitation-persistence/2026-09-20 https://hub.huntbase.io/hunts/terminalfix-async-shell-reverse-tunnel/2026-09-20 https://hub.huntbase.io/hunts/terminalfix-clickfix-delivery-reconnaissance/2026-09-20 https://hub.huntbase.io/hunts/persistent-implant-repurposed-update/2026-09-20 https://hub.huntbase.io/hunts/counterfeit-software-delivery-randomized-execution/2026-09-20 https://hub.huntbase.io/hunts/web-server-shell-execution-wp2shell/2026-09-20 https://hub.huntbase.io/hunts/wordpress-rest-api-exploitation-plugin-staging/2026-09-20 https://hub.huntbase.io/hunts/volume-shadow-copy-manipulation-impact/2026-09-17 https://hub.huntbase.io/hunts/vss-abuse-precursors-exploitation-lateral-movement/2026-09-17 https://hub.huntbase.io/hunts/purecrypter-evasion-mallox-execution/2026-09-17 https://hub.huntbase.io/hunts/mallox-mssql-exploitation-initial-delivery/2026-09-17 https://hub.huntbase.io/hunts/living-off-the-agent-tunnels-persistence/2026-09-17 https://hub.huntbase.io/hunts/gammaload-ads-persistence-powershell/2026-09-09 https://hub.huntbase.io/hunts/gamaredon-gammaload-vbscript-registry/2026-09-09