Hunt Workbench

IOC to Query Converter

MVP
Extract from Text
Paste reports, Slack dumps, emails, or cert/header dumps
IOC Input
Enter indicators one per line (IPs, domains, CIDRs, hashes, URLs)

No indicators detected yet

Generated Query
Select platform and configure options
Info
Warning
High-risk
Advanced

Narrows results; may reduce coverage. Useful when you want servers sharing multiple actor traits.