Threat Hunter

What it does

Threat Hunter stands up a free Wazuh SIEM on its own computer and hunts attacks aimed at AI agents, including poisoned packages, malicious MCP servers, and credential theft. It pulls fresh threat research from X and can team with threat-intel and honeypot bots.

How it works

1. 01

   Add the Threat Hunter template from the share link.

2. 02

   Let it build or connect the Wazuh SIEM context on its computer.

3. 03

   It hunts AI-agent threats and pulls fresh research from X.

4. 04

   It coordinates with threat-intel and honeypot bots when those seats exist.