Proactive threat hunting pack latest

[ArikDay]

Status

• In Progress
• Ready
• In Hold - (Reason for hold)

Related Issues

fixes: link to the issue

Description

The "Proactive Threat Hunting" pack for XSOAR enables users to initiate threat hunting sessions with the primary goal of identifying undetected threats within their environment. This pack supports two distinct hunting methods:
SDO Hunting: Users can build hypotheses around specific STIX Data Object (SDO) indicators such as Campaigns, Intrusion Sets, or Malware. The pack allows for the search of Indicators of Compromise (IOCs) related to the selected SDO indicator, as well as the identification of tools and tactics used in the corresponding attack pattern.
Freestyle Hunt: This method empowers threat hunters to execute custom queries, upload their own IOCs, and conduct comprehensive searches and data enrichment on entities within the environment.
Additionally, both hunting methods in the pack offer the capability to take remediation actions directly from the hunting session layout. This includes the ability to block IOCs, isolate endpoints, block accounts, and quarantine files, providing a holistic approach to threat hunting and response.
Overall, the "Proactive Threat Hunting" pack enhances XSOAR's capabilities by allowing security teams to proactively explore and identify potential threats, providing a powerful toolset to enhance the organization's cybersecurity posture.

Must have

• Tests
• Documentation

[content-bot]

This PR was automatically updated by a GitHub Action

• CommonPlaybooks pack version was bumped to 2.4.20.

To stop automatic version bumps, add the ignore-auto-bump-version label to the github PR.

[content-bot]

This PR was automatically updated by a GitHub Action

• CortexXDR pack version was bumped to 6.0.2.

To stop automatic version bumps, add the ignore-auto-bump-version label to the github PR.

[content-bot]

This PR was automatically updated by a GitHub Action

• CommonPlaybooks pack version was bumped to 2.4.21.

To stop automatic version bumps, add the ignore-auto-bump-version label to the github PR.

[content-bot]

This PR was automatically updated by a GitHub Action

• CommonPlaybooks pack version was bumped to 2.4.22.

To stop automatic version bumps, add the ignore-auto-bump-version label to the github PR.

[content-bot]

This PR was automatically updated by a GitHub Action

• CommonPlaybooks pack version was bumped to 2.4.23.

To stop automatic version bumps, add the ignore-auto-bump-version label to the github PR.

[content-bot]

This PR was automatically updated by a GitHub Action

• CommonPlaybooks pack version was bumped to 2.4.24.

To stop automatic version bumps, add the ignore-auto-bump-version label to the github PR.