· 4 min read
Threat hunting news recap: June to September 2026, grouped by theme
Four months of announcements from the tools in this guide and the standards they rely on.
- News recap
Blog
Threat hunting blog
Longer notes from the editorial desk.
· 4 min read
How to run a proof of concept for a threat hunting tool
Same data, same hunts, same scorecard, fixed dates.
- Buying
- Testing
· 3 min read
Threat hunting tool pricing: what vendors publish, and what to ask
No list prices, one calculator, and a short set of questions for the sales call.
- Buying
- Pricing
· 4 min read
Sigma in 2026: what three releases added, and how a shared rule reaches your data
Rule releases as hunt prompts, and the path from generic rule to tested query.
- Standards
- Detection engineering
· 3 min read
Five assumptions about threat hunting tools, checked against vendor pages
What buyers often assume, and what the public pages actually say.
- Buying
- Data access
· 4 min read
What MITRE ATT&CK v19 changes for threat hunters
One tactic became two. Here is what that does to hunt notes, coverage maps and vendor questions.
- ATT&CK
- Standards
· 4 min read
Backtesting and retrohunts: testing a detection before it goes live
Run the rule against the past before you trust it with the future.
- Detection engineering
- Testing
· 4 min read
Hunting where the data lives: what federated search means in practice
One question, several systems, no copy of the data.
- Data access