https://huntbook.predefender.com/tags/frameworks/index.htmlHugoen-usFri, 10 Jul 2026 00:00:00 +0000https://huntbook.predefender.com/part-1/frameworks/diamondmodel/index.htmlSun, 23 Jun 2024 20:15:39 +0200https://huntbook.predefender.com/part-1/frameworks/diamondmodel/index.htmlA practical explanation of the Diamond Model of Intrusion Analysis and how threat hunters can use it to structure observations, connect evidence and improve handover.https://huntbook.predefender.com/part-1/frameworks/killchains-1/index.htmlSat, 22 Jun 2024 10:17:04 +0200https://huntbook.predefender.com/part-1/frameworks/killchains-1/index.htmlA practical explanation of the Lockheed Martin Cyber Kill Chain and how threat hunters can use it to reason about intrusion stages, detection opportunities and defensive disruption.https://huntbook.predefender.com/part-1/frameworks/killchains-2/index.htmlSun, 07 Jul 2024 11:39:29 +0200https://huntbook.predefender.com/part-1/frameworks/killchains-2/index.htmlA practical explanation of the Unified Kill Chain and how threat hunters can use it to map attacker progression, align observations with MITRE ATT&CK and structure investigations.https://huntbook.predefender.com/part-1/frameworks/mitreattack/index.htmlSun, 23 Jun 2024 20:15:47 +0200https://huntbook.predefender.com/part-1/frameworks/mitreattack/index.htmlA practical explanation of MITRE ATT&CK and how threat hunters can use it as a behavioural vocabulary for hypotheses, investigations, detection coverage and reporting.https://huntbook.predefender.com/part-1/frameworks/ooda/index.htmlSat, 22 Jun 2024 10:16:57 +0200https://huntbook.predefender.com/part-1/frameworks/ooda/index.htmlA practical explanation of the OODA Loop and how threat hunters can use it to structure observation, orientation, decision-making and action during investigations.https://huntbook.predefender.com/part-1/frameworks/pyramidofpain/index.htmlSun, 23 Jun 2024 20:15:33 +0200https://huntbook.predefender.com/part-1/frameworks/pyramidofpain/index.htmlA practical explanation of the Pyramid of Pain and how threat hunters can use it to prioritise indicators, detection logic and adversary disruption.https://huntbook.predefender.com/part-1/frameworks/threathunting/peak/index.htmlSun, 22 Sep 2024 13:40:11 +0200https://huntbook.predefender.com/part-1/frameworks/threathunting/peak/index.htmlA practical explanation of the PEAK Threat Hunting Framework and how it can help threat hunters prepare, execute and turn hunt knowledge into lasting security improvement.https://huntbook.predefender.com/part-1/frameworks/threathunting/tahiti/index.htmlSun, 13 Apr 2025 09:39:04 +0200https://huntbook.predefender.com/part-1/frameworks/threathunting/tahiti/index.htmlA practical explanation of TaHiTI and how it can help threat hunters turn threat intelligence into focused, risk-driven and repeatable hunting investigations.https://huntbook.predefender.com/part-1/frameworks/threathunting/magma/index.htmlSun, 13 Apr 2025 10:45:06 +0200https://huntbook.predefender.com/part-1/frameworks/threathunting/magma/index.htmlA practical explanation of MaGMa and how it can support SOC use case management, threat hunting, detection engineering and continuous improvement.https://huntbook.predefender.com/part-1/methodologies/anomaly-driven/index.htmlMon, 29 Jul 2024 18:35:05 +0200https://huntbook.predefender.com/part-1/methodologies/anomaly-driven/index.htmlA practical explanation of anomaly-driven threat hunting and how threat hunters can use baselines, deviations and context to identify suspicious behaviour.https://huntbook.predefender.com/part-1/methodologies/hypothesis-driven/index.htmlMon, 29 Jul 2024 18:34:30 +0200https://huntbook.predefender.com/part-1/methodologies/hypothesis-driven/index.htmlA practical explanation of hypothesis-driven threat hunting and how threat hunters can turn assumptions about adversary behaviour into focused, testable investigations.https://huntbook.predefender.com/part-1/methodologies/intelligence-driven/index.htmlMon, 29 Jul 2024 18:34:54 +0200https://huntbook.predefender.com/part-1/methodologies/intelligence-driven/index.htmlA practical explanation of intelligence-driven threat hunting and how threat hunters can turn threat intelligence into focused, relevant and testable investigations.