Threat Hunting & Intelligence
Dynamic threat intelligence feeds (abuse.ch, AlienVault OTX), certified Sigma rule detection, and EWMA statistical anomaly outlier hunting.
Active Threat IoCs
--
In-memory O(1) matching
Certified Sigma Rules
--
ECS 8.x mapped detection rules
Statistical Anomalies
--
Z-Score ≥ 3.0σ deviations
Sigma Detections
--
Triggered rule alerts
UEBA High-Risk Entities
--
User & host behavioral baselines
| Indicator Value |
Type |
Threat Classification |
Malware Family |
Confidence |
Source Feed |
Status |
| Loading threat intelligence repository... |
| Detected At |
Rule ID |
Rule Title |
Level |
MITRE ATT&CK |
Event Reference |
Match Evidence |
| No Sigma detections triggered yet. |
Loading Sigma rules library...
| Timestamp |
Entity Target |
Metric Profile |
Observed Value |
EWMA Baseline |
Z-Score |
Severity |
Anomaly Details |
| No statistical anomalies detected yet. |
Entity Behavioral Baselines & Risk Posture
| Entity |
Type |
Risk Score |
Events |
Off-Hours |
Lateral |
Known Origins / Peers |
Last Seen |
| No UEBA entity profiles recorded yet. |
Behavioral Drift & Anomaly Alerts
| Timestamp |
Entity |
Anomaly Type |
Severity |
MITRE ATT&CK |
Behavioral Analysis |
| No UEBA behavioral drift alerts triggered yet. |