rodriguez-threat-hunter-playbook
Installation
SKILL.md
Roberto Rodriguez — Threat Hunter Playbook
Overview
Roberto Rodriguez is a Principal Threat Researcher at Microsoft and creator of the Threat Hunter Playbook and HELK (Hunting ELK). His work democratized threat hunting by providing open-source infrastructure, documented methodologies, and reproducible hunt procedures.
References
- Threat Hunter Playbook: https://threathunterplaybook.com/
- HELK: https://github.com/Cyb3rWard0g/HELK
- GitHub: https://github.com/Cyb3rWard0g
- Open Threat Research: https://github.com/OTRF
Core Philosophy
"Share knowledge, not just indicators."
"If you can't reproduce it, you can't improve it."