Threat Hunting
Hunt Winter: Cold Cases with Honest Dead Ends
A slower hunt arc where most threads go cold, training analysts to document why a lane should close instead of chasing ghosts.
- Duration
- 5 weeks · async
- Format
- Self-paced
- Price (KRW)
- ₩720,000
- Filters
- Intermediate · Long arc
Overview
You receive partial telemetry, conflicting witness logs, and a leadership ask for an early read. The scoring rewards disciplined closure.
What is included
- ✓ Cold case archives with instructor annotations
- ✓ Executive readout practice
- ✓ Negative space journaling prompts
- ✓ Budgeted analyst hours per mission
- ✓ Optional bilingual briefing templates
- ✓ Office hours focused on closure writing
- ✓ Library of tactful 'no finding yet' updates
Outcomes
- 1. Close lanes without erasing the audit trail
- 2. Give leadership calibrated language on uncertainty
- 3. Reuse closures to inform sensor tuning requests
Lead facilitator
Noah Ibarra
Simulation engineer who builds adversary-agnostic hunt narratives.
FAQ
It is candid about dead ends, but each week includes a win condition around documentation quality, not flashy catches.
Participant notes
“Hunt Winter felt uncomfortably realistic about cold threads. I finally have language for 'we looked, here is why we pause.'”