Python Threat Hunting Tools - Kraven Security

Python Threat Hunting Tools

In this series, I will be showcasing a variety of threat hunting tools that you can use to hunt for threats, automate tedious processes, and extend to create your own toolkit using Python.

Python Threat Hunting Tools: Part 1 — Why?

Threat Hunting, Custom Tooling

1 May 2023

Learn how to build your own threat hunting tools with Python in this new series! First, let’s find out why it is important to build your own tools.
Read More ->
Python Threat Hunting Tools: Part 2 — Web Scraping

Threat Hunting, Custom Tooling

8 May 2023

Learn about web scraping and to create your own tool to scrape threat intelligence from CISA’s weekly vulnerability summary.
Read More ->
Python Threat Hunting Tools: Part 3 — Interacting with APIs

Threat Hunting, Custom Tooling

15 May 2023

Welcome back to this series on building threat hunting tools! Today how interacting with APIs can help us threat hunt.
Read More ->
Python Threat Hunting Tools: Part 4 — Browser Automation

Threat Hunting, Custom Tooling

22 May 2023

Learn to use browser automation to automate the threat intelligence process when API access is not available or behind a paywall.
Read More ->
Python Threat Hunting Tools: Part 5 — Command Line Arguments

Threat Hunting, Custom Tooling

31 May 2023

Learn how to give your threat hunting tools command line arguments that modify their behavior when they are executed.
Read More ->
Python Threat Hunting Tools Part 6 — Creating EXEs from Python Files

Threat Hunting, Custom Tooling

5 June 2023

Discover how to create standalone executable programs from your Python scripts that you can use on any Windows operating system using the Python module py2exe.
Read More ->
Python Threat Hunting Tools Part 7 — Parsing CSV

Threat Hunting, Custom Tooling

12 June 2023

Discover how to extract data from a CSV file to analyze it and turn it into threat intelligence or IOCs to hunt for in your environment.
Read More ->
Python Threat Hunting Tools: Part 8 — Parsing JSON

Threat Hunting, Custom Tooling

19 June 2023

Discover how to extract valuable information from JSON to analyze it and turn it into threat intelligence or IOCs to hunt for in your environment.
Read More ->
Python Threat Hunting Tools: Part 9 — Creating Python Packages with Poetry

Threat Hunting, Custom Tooling

30 June 2023

Learn to create your own Python packages using the Python module Poetry. This lets you easily share your threat hunting tools with the community.
Read More ->
Python Threat Hunting Tools: Part 10 — The Power of Jupyter Notebooks

Threat Hunting, Custom Tooling

7 July 2023

Discover what Jupyter Notebooks are and learn how to create your own to structure your threat hunting workflow and improve your efficiency.
Read More ->
Python Threat Hunting Tools: Part 11 – A Jupyter Notebook for MISP

Threat Hunting, Custom Tooling

6 November 2023

Learn how to create a Jupyter Notebook that you can use to query your MISP instance. This will drastically speed up your threat intelligence operations!
Read More ->
Python Threat Hunting Tools: Part 12 – MISP and CrowdStrike Falcon Integration

Threat Hunting, Custom Tooling

20 November 2023

Make your threat hunting process more efficient by integrating MISP and CrowdStrike Falcon EDR so you can automate uploading your IOCs for detection.
Read More ->

Interesting in Learning More?

Learn the dark arts of red teaming

Check out these courses offered by Zero-Point Security. They will teach you all things red teaming from creating exploits, writing your own C2 framework, and emulating real-world threat actors.

If you want more of a challenge, take on one of their certification exams and land your next job in cyber:

Learn more cyber security skills

Check out The All-Access Membership Pass by TCM Academy. for courses on hacking/pentesting, malware analysis, digital forensics, programming/scripting, GRC, and more!

If you’re looking to level up your skills even more, have a go at one of their certifications: