The planning phase encompasses deciding which adversaries matter to your organization and mapping the techniques they use. This critical step is what makes a threat hunt relevant. It is also the phase most teams often skip because it is slow and research intensive. We built the APT TTP Mapper tool to turn an expertise-intensive process into an automated workflow.

This is a real, end-to-end walkthrough of how we used Claude Code to design, build, test, and ship a complete local client-management web app.

One of the biggest challenges for a junior detection engineer is getting hands-on experience without access to an expensive cloud lab. In this guide, we walk through building a free local Splunk detection lab.