CTI Threat Hunt Map
Interactive ATT&CK-mapped threat hunting mind map
A single-file interactive mind map for threat hunters: 490+ copy-ready Splunk hunt queries organized by ATT&CK tactic and telemetry source (Sysmon, Windows Event Logs, Zeek/Corelight), a full living-off-the-land binary reference, 204 threat actor profiles cross-linked by technique, a BYOVD driver reference with a 2,000+ hash LOLDrivers lookup, and per-entity report export. Runs entirely in the browser — no install, no network calls, works offline.
v1.4MITRE ATT&CK v16490+ SPL queries225 LOLBAS binaries204 threat actorsBYOVD hash lookupSteven Stone, RedSheep Security
