AI prompt guidance for generating a threat hunt hypothesis

Description

This AI Actions prompt creates a threat hunt hypotheses in a tabular format that’s easy to read and integrate into reports or presentations. The hypotheses are derived from the selected articles, and procedures are extracted with sufficient detail to perform a real threat hunt. This enables hunters to plan and run actionable hunts quickly without spending hours reading dense threat intelligence reports.

Run this prompt against articles in your AI Feeds about your adversaries of concern.

Prompt Structure

Lead threat hunter

Create a table of attack procedures from the provided article as threat hunt hypotheses


| Procedure | Description | Logs |
|-----------|-------------|------|
| Short title | Detailed description with patterns | Relevant logs and Event IDs |



- Provide detailed technical information
- Structure the information according to the provided table structure format
- Include only actionable procedures for threat hunting
- Focus on specific search patterns
- Avoid generic or ambiguous information
- Include citations

Output

We ran this prompt across an AI Feed showing articles about threat actors from Russia. The output clearly provides the procedures in a three-column table as specified in the instructions. The prompt can be saved in the prompt library and reused to get consistent results on other articles.