Threat Hunting Essentials

Overview

Details

Free Cyber Threat Hunting App to hunt APT, Threat Actors, Malware tools, exploits, etc.

It is a must-have app, which hunts for presence of advanced persistent threats (APTs), threat actors, state-sponsored attackers, malware, and exploits in your organization's assets. All detected malware, exploits, and threat actors are mapped to the MITRE ATT&CK framework, providing deep insight into potential risks.

Threat Hunting Essentials detects a wide range of malware tools used by threat actors, including:

1. Backdoor.
2. Worms.
3. Ransomware.
4. Bots.
5. Trojan horses.
6. Keyloggers.
7. Rootkits.
8. Spyware.
9. Fileless malware.
10. Cryptojacking.
11. Wiper malware.
12. Adware.
14. Viruses
15. P2P-Worm
16. Internet Worms
17. Net-worm
18. Clickjacking
19. Cryptominer
20. Fileless malware

You can easily configure the scan interval in the app’s settings. The real-time scan feature continuously monitors for threats in near real-time, as allowed by Splunk.

Information Use: Your email address is used to improve detection logic based on your feedback. Additionally, we may notify you about app upgrades, updates, or changes to features, user agreements, or the privacy policy.

Cyber Security Essentials is a must-have Splunk app for organizations looking to enhance threat detection beyond traditional indicators of compromise (IOCs). The app focuses on detecting advanced persistent threats (APTs), state-sponsored attackers, and various types of malware by analyzing patterns and behaviors in your organization's assets. It also maps threats to the MITRE ATT&CK framework, providing additional context and improving threat intelligence alignment.

Key Features:

Detection of Advanced Persistent Threats (APTs) and State-Sponsored Attackers: Cyber Security Essentials is tailored for identifying sophisticated threats that often bypass traditional defenses. By using advanced threat hunting queries, it goes beyond basic IOC matching to detect behaviors consistent with APTs and other advanced attackers.

Mapping to MITRE ATT&CK Framework:

The app maps detected threats to the MITRE ATT&CK framework, providing security teams with insights into the tactics and techniques used by attackers. This mapping makes it easier to understand, track, and mitigate advanced threats.

Behavioral Detection:

Cyber Security Essentials uses threat hunting queries that incorporate regular expressions and advanced analytics, allowing it to detect patterns indicative of cyber threats even when threat actors frequently change IPs, hashes, or other basic indicators.

Real-Time Threat Monitoring:

The app’s real-time monitoring capabilities allow it to identify malicious activity as it happens, providing immediate alerts for faster response.

Why It’s Essential for Cybersecurity?

Cyber Security Essentials is ideal for organizations that require a proactive approach to detecting complex cyber threats. By leveraging behavioral analysis and mapping to MITRE ATT&CK, the app provides insights into the tactics used by adversaries, helping organizations understand and respond to threats more effectively. Its advanced detection methods allow security teams to stay ahead of attackers, even as tactics and techniques evolve.

Release Notes

Version 1.1.176

Nov. 1, 2025

2,911

Downloads

Share Subscribe

Version

Built by

Cyber Essentials Avertpoint

Support

Questions on Splunk Answers Flag as inappropriate

App Contents: Alert Actions

Compatibility

Products: Splunk Enterprise, Splunk Cloud

Splunk Versions: 10.0, 9.4, 9.3, 9.2, 9.1, 9.0, 8.2, 8.1, 8.0, 7.3, 7.2, 7.1, 7.0

Platform: Platform Independent

CIM Versions: 6.x, 5.x, 4.x, 3.x

Licensing

Splunk End User License for Third Party Content

Category & Contents

Categories: Security, Fraud & Compliance, Threat Intel

App Type: App

Subscribe Share

My Account

Support & Services