THREAT HUNTING PLAYBOOK .pdf

This Threat Hunting Playbook from RANK Software outlines 15 common indicators of compromise and a set of threat-hunting scenarios mapped to MITRE CAR/ATT&CK, including SQL queries and detection guidance for the VASA analytics platform; it is a procedural guide for SOC analysts to detect anomalous behaviors (e.g., unusual outbound traffic, suspicious registry changes, RDP activity, event log clearing) rather than a report of a specific cybersecurity incident.