https://huntbase.darkreitor.xyz daily 1 https://huntbase.darkreitor.xyz/queries/apt-lateral-movement-admin-protocols-b2 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt-wmic-recon-chained-b2 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/archive-tool-shell-spawn-b1 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/auth-bypass-network-logon-spray-b2 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/aws-iam-persistence-abuse-b2 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/browser-spawns-cmd-shell-b1 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/cmd-shell-recon-apt3-b1 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/linux-lotl-gtfobins-privesc-b2 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/nodejs-rsc-child-process-b1 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/powershell-download-cradle-b1 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/wmi-provider-host-child-spawn-b2 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/wmic-suspicious-parent-apt-b1 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/cqf-style-impossible-travel-identity 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/cqf-style-lateral-movement-scoring 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/cqf-style-process-injection-chain 2026-04-19T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt3-cmd-recon-multi-tool-b1 2026-04-18T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/browser-exploit-shell-spawn-detection-b2 2026-04-18T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/browser-renderer-shell-spawn-b1 2026-04-18T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/ftp-smtp-data-exfiltration-detection-b2 2026-04-18T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/iis-webshell-viewstate-deser-b1 2026-04-18T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/lotl-multi-tool-chain-detection-b2 2026-04-18T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/native-lolbin-ftp-exfil-b1 2026-04-18T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/php-webshell-process-spawn-b1 2026-04-18T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/powershell-encoded-command-baseline-b2 2026-04-18T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/ransomware-vss-recovery-sabotage-b2 2026-04-18T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/winpeas-linpeas-execution-detection-b2 2026-04-18T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/wmic-apt-chained-discovery-b1 2026-04-18T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt-hands-on-keyboard-discovery-burst-b1 2026-04-17T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt-recon-tools-domain-discovery-b2 2026-04-17T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt3-cmd-shell-recon-chain-b2 2026-04-17T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/iis-w3wp-child-process-viewstate-deser-b2 2026-04-17T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/linux-sudo-misconfiguration-exploit-b1 2026-04-17T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/lolbas-multistage-privesc-chain-b1 2026-04-17T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/powershell-encoded-command-basic-detect-b1 2026-04-17T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/schtasks-persistence-script-payload-b2 2026-04-17T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/web-interpreter-shell-spawn-rce-b2 2026-04-17T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/whoami-priv-token-enum-basic-b1 2026-04-17T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/wmic-apt-enumeration-multi-query-b2 2026-04-17T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/wmic-remote-node-lateral-movement-b1 2026-04-17T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt3-office-document-malicious-child-process-b1 2026-04-16T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/hidden-process-suspicious-parent-chain-b1 2026-04-16T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/identity-lateral-movement-remote-logon-spike-b1 2026-04-16T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/registry-run-key-persistence-modification-b1 2026-04-16T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/scheduled-task-persistence-schtasks-b1 2026-04-16T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/vulnerable-driver-sideload-byovd-b1 2026-04-16T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt3-cmd-multistage-recon-b1 2026-04-15T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/byovd-driver-anomalous-path-b2 2026-04-15T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/clickfix-browser-spawned-lolbin-b2 2026-04-15T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/clickfix-browser-spawned-script-b1 2026-04-15T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/cloud-iam-privilege-escalation-b2 2026-04-15T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/deno-runtime-malware-loader-b1 2026-04-15T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/deno-runtime-malware-loader-b2 2026-04-15T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/executable-from-temp-directory-b1 2026-04-15T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/iis-w3wp-child-process-deser-b2 2026-04-15T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/powershell-encoded-command-b2 2026-04-15T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/whoami-execution-baseline-b1 2026-04-15T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/wmi-spawned-cmd-apt-lateral-b1 2026-04-15T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/alphv-blackcat-av-tamper-defense-evasion-b2 2026-04-14T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt-network-recon-sequence-30min-b1 2026-04-14T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt3-cmd-shell-recon-chain-b1 2026-04-14T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/browser-spawns-interpreter-b1 2026-04-14T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/cmd-apt-recon-basic-b1 2026-04-14T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/f5-bigip-apm-webshell-spawn-b2 2026-04-14T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/fake-browser-update-malware-drop-b1 2026-04-14T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/iis-viewstate-deserialization-child-process-b2 2026-04-14T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/play-ransomware-esxi-vm-shutdown-b2 2026-04-14T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/ransomware-multistage-killchain-correlation-b2 2026-04-14T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/ransomware-shadow-copy-deletion-b1 2026-04-14T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/vssadmin-shadow-delete-basic-b2 2026-04-14T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt-wmic-recon-lateral-movement-b2 2026-04-13T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt3-cmd-recon-chain-b2 2026-04-13T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt3-cmd-whoami-basic-b2 2026-04-13T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/archive-file-code-exec-winrar-b2 2026-04-13T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/archive-shell-spawn-detection-b1 2026-04-13T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/browser-lolbas-malvertising-keitaro-b2 2026-04-13T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/cmd-basic-discovery-recon-b1 2026-04-13T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/identity-lateral-movement-multi-host-b1 2026-04-13T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/powershell-lotl-encoded-base64-b2 2026-04-13T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sudo-privilege-escalation-linux-cve-2025-32463-b1 2026-04-13T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/winrar-archive-spawn-executable-b1 2026-04-13T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/wmic-apt3-reconnaissance-chain-b1 2026-04-13T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/basic-lotl-reconnaissance-windows-b1 2026-04-12T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/basic-windows-executable-outbound-connections-b2 2026-04-12T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/identity-compromise-rapid-lateral-movement-b1 2026-04-12T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/interlock-ransomware-firewall-lateral-b2 2026-04-12T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/leaknet-deno-runtime-loader-b2 2026-04-12T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/linux-shadow-file-access-detection-b1 2026-04-12T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/linux-sudo-privilege-escalation-cve-2025-32463-b1 2026-04-12T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/lolbas-download-cradle-execution-chain-b1 2026-04-12T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/lotl-scheduled-task-persistence-b2 2026-04-12T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/malvertising-browser-encoded-powershell-b2 2026-04-12T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/react2shell-node-spawning-shell-b2 2026-04-12T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/windows-token-impersonation-potato-tools-b1 2026-04-12T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt3-cmd-shell-remote-execution-pattern-b2 2026-04-11T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/basic-net-command-enumeration-b1 2026-04-11T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/basic-powershell-encoded-command-b1 2026-04-11T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/basic-whoami-execution-monitor-b2 2026-04-11T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/cmd-shell-remote-exec-apt-pattern-b1 2026-04-11T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/linux-lotl-recon-chain-detection-b2 2026-04-11T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/post-exploitation-persistence-lotl-binaries-b2 2026-04-11T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/schtasks-persistence-token-manipulation-b1 2026-04-11T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sudo-privilege-escalation-linux-cve-b1 2026-04-11T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/winrar-suspicious-child-process-spawning-b2 2026-04-11T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/wmic-enumeration-apt-system-discovery-b2 2026-04-11T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/wmic-lotl-remote-recon-b1 2026-04-11T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt-hands-on-keyboard-recon-sequence-b2 2026-04-07T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/apt-office-macro-c2-callback-b2 2026-04-07T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/compromised-identity-lateral-logon-b2 2026-04-07T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/malvertising-browser-lolbin-chain-b2 2026-04-07T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/smartermail-rce-postexploit-b2 2026-04-07T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-ad-ldap-recon-post-compromise-b1 2026-04-07T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-lolbin-external-network-connection-b1 2026-04-07T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-lotl-lolbins-abuse-detection-b1 2026-04-07T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-powershell-encoded-command-b1 2026-04-07T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-uac-bypass-trusted-process-spawn-b1 2026-04-07T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-wsus-exploitation-lateral-movement-b1 2026-04-07T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/webserver-shell-spawn-rce-b2 2026-04-07T00:00:00.000Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/dns-tunneling-detection 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/failed-auth-spike 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/lateral-movement-smb 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-ad-brute-force-password-spray 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-ad-privileged-group-membership-change 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-amsi-bypass-attempt 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-anomalous-dns-query-volume 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-azure-nsg-rule-changes 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-brute-force-password-spray 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-credential-dumping-tools 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-cspm-policy-violations 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-data-staging-archive-tools 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-dcsync-attack 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-dns-exfiltration-indicators 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-lsass-memory-access 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-network-share-enumeration 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-pass-the-hash 2026-04-20T22:17:55.117Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-powershell-download-cradle 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-powershell-encoded-commands 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-process-injection-indicators 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-psexec-remote-service-execution 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-rdp-lateral-movement-burst 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-reconnaissance-commands-burst 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-registry-run-key-modification 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-scheduled-task-creation 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-script-execution-temp-downloads 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-security-tool-tampering 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-shadow-copy-deletion-ransomware 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-sso-application-access-failures 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-suspicious-dll-loading 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-suspicious-lolbin-execution 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-suspicious-service-installation 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-timestomping-detection 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/queries/sofistic-wmi-remote-execution 2026-04-20T22:17:55.118Z monthly 0.7 https://huntbase.darkreitor.xyz/categories/edr weekly 0.5 https://huntbase.darkreitor.xyz/categories/identity weekly 0.5 https://huntbase.darkreitor.xyz/categories/network weekly 0.5 https://huntbase.darkreitor.xyz/categories/threat-hunting weekly 0.5 https://huntbase.darkreitor.xyz/categories/cloud weekly 0.5 https://huntbase.darkreitor.xyz/categories/vulnerability weekly 0.5 https://huntbase.darkreitor.xyz/categories/malware weekly 0.5 https://huntbase.darkreitor.xyz/categories/persistence weekly 0.5