{
  "type": "skill",
  "slug": "soc-hunter",
  "name": "SOC-Hunter",
  "author": "sherlon1",
  "description": "Proactive, hypothesis-driven threat hunting using the LOCK pattern across SIEM, EDR, VM, CSPM, CASB, and code search",
  "github_url": "https://github.com/sherlon1/soc-hunter",
  "license": "MIT",
  "tier": "vetted",
  "tags": [
    "threat-hunting",
    "lock-pattern",
    "mitre-attack",
    "siem",
    "edr",
    "secops",
    "incident-response"
  ],
  "integrations": [
    "Splunk",
    "SentinelOne",
    "Tenable",
    "Netskope",
    "CrowdStrike"
  ],
  "domains": [
    "security-operations",
    "threat-intelligence"
  ],
  "date_added": "2026-07-08",
  "last_reviewed": "2026-10-07",
  "vetted_on": "2026-10-07",
  "vetted_commit_sha": "5eea59b39817d9710ef89ec1abe550293ad2d71b",
  "compatible_platforms": [
    "Claude Code"
  ],
  "invocation": "/soc-hunter",
  "repo": {
    "found": true,
    "archived": false,
    "pushed_at": "2026-10-06T16:09:39Z",
    "stars": 7,
    "forks": 2,
    "open_issues": 0,
    "owner_type": "user",
    "language": "Python",
    "commits_since_vetted": 0,
    "vetted_commit_found": true,
    "checked_at": "2026-11-05T20:35:15.821Z"
  },
  "url": "https://exchange.tenable.com/skills/soc-hunter",
  "json_url": "https://exchange.tenable.com/api/skills/soc-hunter.json",
  "markdown_url": "https://exchange.tenable.com/skills/soc-hunter.md",
  "source_url": "https://github.com/tenable/cyberagents-exchange/blob/main/skills/soc-hunter.md"
}