DeepHunter’s documentation

• Introduction
  • What is DeepHunter?
  • Who is DeepHunter for?
  • What data lakes are supported?
  • Architecture
  • Campaigns and Statistics
  • DeepHunter Modules and Tools
  • Rules synchronization
  • Analytic Workflow
• Installation
  • Compatibility
  • Automated installation (stable release)
  • Manual Installation (dev or advanced)
  • Upgrading DeepHunter
• Authentication, Groups and Privileges
  • Authentication modes
  • Local authentication
  • PingID
  • Entra ID
  • Groups and Privileges
• Scripts
  • Description
  • Location
  • List of scripts
• Settings
  • SECRET_KEY
  • DEBUG
  • UPDATE_ON
  • TEMP_FOLDER
  • VENV_PATH
  • SHOW_LOGIN_FORM
  • ALLOWED_HOSTS
  • AUTH_PROVIDER
  • USER_GROUP
  • SERVER_USER
  • GITHUB_URL
  • GITHUB_LATEST_RELEASE_URL
  • GITHUB_COMMIT_URL
  • DB_DATA_RETENTION
  • RARE_OCCURRENCES_THRESHOLD
  • CAMPAIGN_MAX_HOSTS_THRESHOLD
  • ON_MAXHOSTS_REACHED
  • ANALYTICS_PER_PAGE
  • DAYS_BEFORE_REVIEW
  • DISABLE_ANALYTIC_ON_REVIEW
  • AUTO_STATS_REGENERATION
  • REPO_IMPORT_CREATE_FIELD_IF_NOT_EXIST
  • REPO_IMPORT_DEFAULT_STATUS
  • REPO_IMPORT_DEFAULT_RUN_DAILY
  • NOTIFICATIONS_RECIPIENTS
  • AUTO_DELETE_NOTIFICATIONS_AFTER
  • AI_CONNECTOR
  • PROXY
  • AUTHENTICATION_BACKENDS
  • INSTALLED_APPS
  • MIDDLEWARE
  • ROOT_URLCONF
  • TEMPLATES
  • WSGI_APPLICATION
  • DATABASES
  • AUTH_PASSWORD_VALIDATORS
  • Internationalization settings
  • STATIC_URL and STATIC_ROOT
  • DEFAULT_AUTO_FIELD
  • LOGIN_URL
  • DBBACKUP
  • AUTO_LOGOUT
  • CELERY
• Modules
  • Dashboards
  • Analytics
  • Trend
  • Timeline
  • Netview
  • Manage campaigns
  • Notifications
• Reports
  • Campaigns stats
  • Threat Huntig Analytics Performance
  • Last campaign endpoints
  • Endpoints with most number of distinct analytics
  • Analytics to review
  • Current MITRE coverage
  • Missing MITRE mapping
  • Auto-disabled Threat Hunting Analytics
  • Threat Hunting Analytics with errors
  • Threat Hunting Analytics with rare occurrences
  • Threat Hunting Analytics with zero occurrences
  • Archived Analytics
• Tools
  • LOL Driver Hash Checker
  • VirusTotal Hash Checker
  • VirusTotal IP Checker
  • Whois
  • MalwareBazaar Hash Checker
  • Develop your own
• Plugins
  • Description
  • catalog
  • Enable, disable and configure plugins
  • Plugins
• Repos
  • Description
  • Expected format for repositories
  • Contents
• Admin
  • The database model
  • Logout
  • Debug
  • Backend
  • Create/modify threat hunting analytics
  • Bulk actions
• Support
  • Help Marker
  • Report an issue