Define Hunt Focus

This skill synthesizes completed research on system internals and adversary tradecraft into a single, focused hypothesis that defines what specific attack pattern will be investigated in the hunt.

It is executed after research has been completed and before detailed hunt planning, environment scoping, or query development.

Workflow

• You MUST complete each step in order and MUST NOT proceed until the current step is complete.
• You MUST NOT perform new web searches or introduce new research in this skill.

Step 1: Synthesize Research Context

Establish the context required to define a focused hunt hypothesis using the outputs of prior research.