Updated 9 months ago
https://github.com/crowdstrike/foundry-tutorial-threat-hunting
Create a threat hunting dashboard and set it as your app's home page. Schedule an email to regularly provide the security team with a list of hosts exhibiting suspicious DNS activity.