THOR Collective
@thorcollective.bsky.social
📤 26
📥 4
📝 8
thorcollective.com
reposted by
THOR Collective
LP
8 days ago
We at
@thorcollective.bsky.social
are waking you up before September ends, because a new Ask-a-Thrunt3r episode just dropped with: 2K subscriber milestone 🎉 15 baseline examples The great data vs. data debate Plus: Is Git the future of hunting collab? 🎧:
dispatch.thorcollective.com/p/ask-a-thru...
loading . . .
Ask-a-Thrunt3r: September 2025 Recap 🐏
Mainly ramblings. And maybe some wisdom.
https://dispatch.thorcollective.com/p/ask-a-thrunt3r-september-2025-recap
0
2
2
reposted by
THOR Collective
sydney
21 days ago
✨ Representation is STILL a security issue. ✨
@thorcollective.bsky.social
Dispatch with
@kassafras09.bsky.social
from March. The message still stands. • Fix biased job reqs • Put diverse voices on panels • Mentor future hackers • Model inclusive leadership
dispatch.thorcollective.com/p/why-we-nee...
loading . . .
Why We Need More Women and Intersectional Diversity in Cyber (And How to Get There)
Representation matters in cybersecurity. Here’s why—and what we can do about it.
https://dispatch.thorcollective.com/p/why-we-need-more-women-and-intersectional-diversity-in-cyber
1
2
1
reposted by
THOR Collective
sydney
2 months ago
The Hacker Summer Camp starter pack: ⚡ Stickers ⚡ Patches ⚡ Coins ⚡ Wristbands ⚡ Temporary THRUNT tattoos Find the
@thorcollective.bsky.social
crew in Vegas. Say hi and get some swag 👀
1
1
1
Shoutout to our fam Elipscion, who's spinning live at DEF CON 33 this Friday at 8pm on the DEF CON stage. 🎧 Listen here:
open.spotify.com/artist/2tgPZ...
🔥 Join our
@thorcollective.bsky.social
meetup during his set. Say hi, talk hunts, and grab some free swag. See you there!
loading . . .
ELIPSCION
Artist · 10 monthly listeners.
https://open.spotify.com/artist/2tgPZpjIPEU2ZbfEE0C6dM?si=sSSrwkgaQky2PF2hT_lbHw
2 months ago
1
3
3
reposted by
THOR Collective
sydney
2 months ago
Threat hunting is broken. We can’t out-query adversaries who automate everything. Enter the agentic threat hunter. An AI that thinks, hypothesizes, investigates, and scales. In the latest
@thorcollective.bsky.social
Dispatch, we explore this shift: 📌
dispatch.thorcollective.com/p/the-agenti...
1
3
3
reposted by
THOR Collective
3 months ago
🚨New post on
@thorcollective.bsky.social
Dispatch🚨 Tired of getting ignored after dropping a valid XSS vuln? Stop showing alert(1) pop-ups & start stealing sessions. Make it real. Bring a bit of pain. Read it here 👉
open.substack.com/pub/thorcoll...
loading . . .
Make It Hurt (a Little): Why Showing Real Impact in Pentest Findings Matters
“Cool alert box, bro. Now what?”
https://open.substack.com/pub/thorcollective/p/make-it-hurt-a-little-why-showing?r=56ij68&utm_campaign=post&utm_medium=web&showWelcomeOnShare=true
0
1
1
We’re giving away another THOR Collective Challenge Coin. Ask-a-Thrunter drops early August (recording July 31). Hacker Summer Camp vibes guaranteed. 🎟️ Join our paid sub for giveaways + Discord. 💬 Questions? Drop ’em.
radio.thorcollective.com
loading . . .
Redirecting…
If you’re not redirected, click here.
https://radio.thorcollective.com/
3 months ago
1
1
1
reposted by
THOR Collective
sydney
3 months ago
New from
@thorcollective.bsky.social
Dispatch: If You Like It Then You Should’ve Put a timechart on It We’re diving into why timechart is a threat hunter’s best friend. From beaconing to privilege spikes, baselines, and more. Read it here 👉
dispatch.thorcollective.com/p/if-you-lik...
loading . . .
If You Like It Then You Should've Put a timechart on It
Hey thrunters, gather ’round: timechart’s up
https://dispatch.thorcollective.com/p/if-you-like-it-then-you-shouldve-put-a-timechart-on-it
1
3
3
No
@thorcollective.bsky.social
Dispatch posts this week. We’re taking a breather to rest and recharge. We'll be back next week, ready to thrunt.
#threathunting
#thrunting
#THORcollective
#cybersecurity
#infosec
3 months ago
0
1
1
reposted by
THOR Collective
sydney
3 months ago
THRUNTING isn’t just a buzzword. It’s a mindset. 🐑 Inspired by Tim Peters’ 19 aphorisms for Python,
@thorcollective.bsky.social
Dispatch introduces "The Zen of Thrunting."
dispatch.thorcollective.com/p/the-zen-of...
Stay curious. Happy thrunting.
loading . . .
The Zen of Thrunting
Abstract
https://dispatch.thorcollective.com/p/the-zen-of-thrunting
1
4
3
reposted by
THOR Collective
sydney
3 months ago
Dispatch Debrief: June 2025 Everything’s fine… until it isn’t. This month’s
@thorcollective.bsky.social
Dispatch served up a spicy mix of threat hunting, plugin paranoia, purple teaming insights, and a few thrunting curveballs to keep you sharp. 🌶️
dispatch.thorcollective.com/p/dispatch-d...
loading . . .
Dispatch Debrief: June 2025
Because "Everything's Fine" is Just Another Way of Saying "I Haven't Looked Yet"
https://dispatch.thorcollective.com/p/dispatch-debrief-june-2025
1
3
2
reposted by
THOR Collective
sydney
4 months ago
New guest post on
thorcollective.bsky.social
Dispatch from
infosecsherpa.bsky.social
: Don’t Let Mis(s) Information Take the Crown 👑 This post shows how to apply the Intelligence Cycle to news and help you filter bias. Read it here:
dispatch.thorcollective.com/p/dont-let-m...
loading . . .
Don't Let Mis(s) Information Take the Crown
Sherpa Intelligence: Your Guide Up a Mountain of Information!
https://dispatch.thorcollective.com/p/dont-let-miss-information-take-the-crown
1
4
4
This month’s Dispatch Giveaway is live! 🔥 One lucky paid subscriber will win a
thorcollective.bsky.social
challenge coin! 🗓️ June 26 @ 7PM PT Streaming live in our private Discord Podcast drops for everyone the following week ➡️ Join the Collective:
dispatch.thorcollective.com
loading . . .
THOR Collective Dispatch | Sydney Marrone | Substack
A hub for threat hunters (thrunters) and security professionals. Explore cutting-edge ideas, practical frameworks, and community-driven insights in cybersecurity. Powered by collaboration,…
https://dispatch.thorcollective.com
4 months ago
1
2
1
reposted by
THOR Collective
LP
4 months ago
⚡ New
@thorcollective.bsky.social
Dispatch drop No hallucinations here. Just TTPs that quietly defined Q1 2025. 🔐 OAuth abuse 📦 Malicious packages 🖥️ SimpleHelp RMM exploits Stay ahead with what to hunt & where to look. 👉
dispatch.thorcollective.com/p/from-the-f...
#THORCollective
#threathunting
loading . . .
From the Fire: Q1FY25
TTPs that sparked, spread, and still burn for those paying attention.
https://dispatch.thorcollective.com/p/from-the-fire-q1fy25
0
4
3
reposted by
THOR Collective
sydney
4 months ago
#threatintelligence
#threathunting
#splunk
#cybersecurity
#infosec
#THORcollective
#thrunting
#AIisMyBestie
0
1
1
reposted by
THOR Collective
sydney
4 months ago
The May Dispatch is live. Fresh insights from
@thorcollective.bsky.social
and guest contributors on detection in depth, AI in the SOC, career overlaps, and making your hunts actually matter. Plus memes. Obviously. 👉
dispatch.thorcollective.com/p/dispatch-d...
loading . . .
Dispatch Debrief: May 2025
Quiet logs, loud analysts, and AI besties. Just another month in the hunt.
https://dispatch.thorcollective.com/p/dispatch-debrief-may-2025
1
3
2
🐏 Ask a Thrunter AMA + Giveaway! Join
@thorcollective.bsky.social
live next THORsday, May 29th @ 7pm PT in Discord. We’ve got a special announcement + we’ll reveal the monthly giveaway winner (all paid Dispatch subscribers automatically entered!). Submit your questions early👇
5 months ago
0
3
2
reposted by
THOR Collective
sydney
5 months ago
Introverts rewrite detection rules repeatedly, while extroverts demo them mid-draft. In cybersecurity, you need both. Today's
@thorcollective.bsky.social
Dispatch features Alex Hurtado, highlighting how embracing differences strengthens SOC teams. 👉 :
dispatch.thorcollective.com/p/quiet-loud...
loading . . .
Quiet, Loud, and in the Logfiles: The Detection Duo You Didn’t Know You Needed
Filed under: Things your agent can’t do but Linda from SecOps does without breaking a sweat.
https://dispatch.thorcollective.com/p/quiet-loud-and-in-the-logfiles
0
1
2
reposted by
THOR Collective
5 months ago
🚨 New guest drop on @THOR_Collective Dispatch! 🚨 "Exploring Cybersecurity Career Paths and How They Work Together" by Audra Streetman Whether you're into offense, intel, or cyber defense, there's a path for you! Read it here:
dispatch.thorcollective.com/p/exploring-...
0
2
3
reposted by
THOR Collective
sydney
5 months ago
💥 New SPL Dispatch drop from
@thorcollective.bsky.social
: eventstats 💥 Want to flag weird behavior without losing raw data? eventstats lets you compare each event to the group without rolling things up. Read it here 👉
dispatch.thorcollective.com/p/every-even...
loading . . .
Every Event for Itself…Until You Run eventstats
SPL Dispatch #2 - 05/13/2025
https://dispatch.thorcollective.com/p/every-event-for-itself-until-you-run-eventstats
1
2
2
reposted by
THOR Collective
sydney
5 months ago
💡 New guest drop on
@thorcollective.bsky.social
Dispatch: "Detection-in-Depth" by Day Johnson. Day covers how to build resilient detection systems that handle real-world challenges, from fine-tuning rules to threat emulation and kill chain coverage.
dispatch.thorcollective.com/p/detection-...
loading . . .
Detection-In-Depth
Eliminating detection blind spots through a multi-layered defense approach
https://dispatch.thorcollective.com/p/detection-in-depth
1
2
3
reposted by
THOR Collective
sydney
5 months ago
🎧 Ask-a-Thrunter: Episode 1 is live!
@thorcollective.bsky.social
covered everything from hunt standups to VirusTotal vs. behavioral hunting and announced our April giveaway winner! Replay:
dispatch.thorcollective.com/p/ask-a-thru...
Should we make this monthly? Drop a comment below.
loading . . .
Ask-a-Thrunter: The Recap Is Here 🐏
Mainly ramblings. And maybe some wisdom.
https://dispatch.thorcollective.com/p/ask-a-thrunter-05012025
1
1
1
reposted by
THOR Collective
sydney
5 months ago
🔥 Dispatch Debrief: April 2025 is live 🔥 Explore star sign-inspired hunting techniques, organizing your hunt squad, and the value of finding "nothing." Discover this month's insights from
@thorcollective.bsky.social
Dispatch -
dispatch.thorcollective.com/p/april-debr...
loading . . .
Dispatch Debrief: April 2025
What We Hunted, Learned, and Loved This Month
https://dispatch.thorcollective.com/p/april-debrief-2025
1
4
4
reposted by
THOR Collective
sydney
5 months ago
Ask-a-Thrunter is live this THORsday, May 1 @ 7pm PDT — paid subscribers only. Join us in the
@thorcollective.bsky.social
Discord for solid answers, spicy takes, and the April giveaway winner reveal. Drop your questions below. Not subscribed? Replay drops next week. Come thrunt with us 🐏
1
4
2
reposted by
THOR Collective
sydney
5 months ago
Normal is overrated. Hunt the outliers with Z-scores and standard deviation in the new
@thorcollective.bsky.social
Dispatch post. Read it here:
dispatch.thorcollective.com/p/z-scoring-...
#threathunting
#thrunting
#detectionengineering
#infosec
#cybersecurity
#splunk
#statistics
loading . . .
Z-Scoring Your Way to Better Threat Detection
“Normal” is just a setting on a dryer. Let’s talk about what’s actually weird in your data.
https://dispatch.thorcollective.com/p/z-scoring-your-way-to-better-threat-detection
0
2
3
reposted by
THOR Collective
sydney
6 months ago
🪦 D.E.A.T.H. comes in many forms, and so does thrunting. Check out the latest
@thorcollective.bsky.social
Dispatch covering three ways to implement these!
dispatch.thorcollective.com/p/the-models...
#threathunting
#thrunting
#detectionengineering
#THORcollective
#cybersecurity
#DEATH
#infosec
loading . . .
The Model(s) of D.E.A.T.H & Thrunt
There Can Only (Not) Be One
https://dispatch.thorcollective.com/p/the-models-of-death-and-thrunt
0
2
2
reposted by
THOR Collective
sydney
6 months ago
When incidents hit, how you communicate shapes the outcome. This week’s
@thorcollective.bsky.social
Dispatch features
@audrastreetman.bsky.social
, former journalist turned cyber intel analyst.
dispatch.thorcollective.com/p/how-commun...
loading . . .
How Communication Shapes the Outcome of Cybersecurity Incidents
Why the timing and transparency of messaging can make or break your incident response
https://dispatch.thorcollective.com/p/how-communication-shapes-the-outcome
1
5
3
reposted by
THOR Collective
sydney
6 months ago
Hunting smarter ≠ harder. In this week's
@thorcollective.bsky.social
post, Sai Molige introduces the LAYER approach, turning strategy into practical threat hunting moves.
dispatch.thorcollective.com/p/the-power-...
#infosec
#threathunting
#thrunting
#blueteam
#threatdetection
#THORcollective
loading . . .
The Power of the Trio
Introducing the LAYER Approach
https://dispatch.thorcollective.com/p/the-power-of-trio-layer-approach
0
1
2
reposted by
THOR Collective
sydney
6 months ago
Because logs don’t hunt themselves 😤 We just kicked off a new series on
@thorcollective.bsky.social
Dispatch called SPL Dispatch, where we break down powerful Splunk commands through a threat hunting lens. First up: tstats
dispatch.thorcollective.com/p/because-lo...
loading . . .
Because Logs Don’t Hunt Themselves - A Deep Dive into tstats
SPL Dispatch #1 - 04/08/2025
https://dispatch.thorcollective.com/p/because-logs-dont-hunt-themselves-tstats
0
1
1
reposted by
THOR Collective
sydney
7 months ago
🔥 New Dispatch 🔥 In our latest guest post, Alex Hurtado talks the 2025 State of Detection Engineering Report. tl;dr: Off-the-shelf detections won't save you. Your environment deserves better.
dispatch.thorcollective.com/p/detection-...
#detectionengineering
#threathunting
#thrunting
#THORcollective
loading . . .
Detection Engineering: DIY or Die Trying
There’s a rising practice becoming the critical backbone of SecOps—and surprise, it’s not CNAPP. Sorry, unicorn Wiz.
https://dispatch.thorcollective.com/p/detection-engineering-diy-or-die-trying
0
3
2
reposted by
THOR Collective
sydney
7 months ago
🔥Latest Dispatch: HEARTH🔥 HEARTH (Hunting Exchange and Research Threat Hub) is an open-source project for sharing and refining threat hunting ideas. Learn what it is and how to contribute:
dispatch.thorcollective.com/p/introducin...
#ThreatHunting
#Thrunting
#Cybersecurity
#HEARTH
#THORcollective
loading . . .
Introducing HEARTH: A Community-Driven Threat Hunting Repository
Threat hunting is an art and a science.
https://dispatch.thorcollective.com/p/introducing-hearth
0
2
3
reposted by
THOR Collective
sydney
7 months ago
🚨 New Dispatch Drop 🚨 Attackers will get in—just give them time. In this week's
@thorcollective.bsky.social
Dispatch, we talk why security teams must test their defenses:
dispatch.thorcollective.com/p/why-cybers...
#threathunting
#thrunting
#cybersecurity
#infosec
#purpleteam
#THORcollective
loading . . .
Why Cybersecurity Teams Need to Break Their Own Defenses
If you’re not testing your security, you don’t have security.
https://dispatch.thorcollective.com/p/why-cybersecurity-teams-need-to-test
0
2
2
reposted by
THOR Collective
sydney
7 months ago
Excited to share our latest post from
@thorcollective.bsky.social
Dispatch!
@ednas.bsky.social
dives into Splunk DECEIVE, an AI-powered honeypot by
@davidjbianco.bsky.social
. Read more:
dispatch.thorcollective.com/p/exploring-...
#cybersecurity
#infosec
#AI
#thrunting
#THORCollective
#splunk
loading . . .
Exploring Splunk DECEIVE
The AI Queen bee does DECEIVE
https://dispatch.thorcollective.com/p/exploring-splunk-deceive
0
2
5
reposted by
THOR Collective
sydney
8 months ago
Tired of getting ghosted by endless events? The five-number summary is your threat-hunting sidekick. Check out our latest
@thorcollective.bsky.social
Dispatch. Join us👉:
dispatch.thorcollective.com/p/stop-chasi...
#threathunting
#thrunting
#cybersecurity
#mathiscool
#THORCollective
loading . . .
Stop Chasing Ghosts: How Five-Number Summaries Reveal Real Anomalies
Boo. No séance required.
https://dispatch.thorcollective.com/p/stop-chasing-ghosts-how-five-number
0
2
2
reposted by
THOR Collective
sydney
8 months ago
🐘 Let’s address the elephant in the room —
#thrunting
is a thing now, and it stuck. Why? Because thrunting has that perfect blend of
#hacker
culture & "I dare you to question this term" energy. 🔥 Keep thrunting. 👉
dispatch.thorcollective.com/p/the-case-f...
#threathunting
#cybersecurity
#infosec
loading . . .
The Case for Thrunting
Why Thrunting Is Here to Stay
https://dispatch.thorcollective.com/p/the-case-for-thrunting
1
3
3
reposted by
THOR Collective
sydney
8 months ago
🚀 Attention Thrunters!🚀 Part 3 of the DEATHCon thrunting workshop is live!
@jotunvillur.bsky.social
and I break down a hypothesis-driven scenario step by step. Grab your hammer and sharpen your skills! 🛠️ Read now:
dispatch.thorcollective.com/p/a-deathcon...
#threathunting
#thrunting
#cybersecurity
loading . . .
A DEATHCON Thrunting Workshop Overview Part 3: ⚡ Hypothesis-Driven Threat Hunting
Detecting /etc/passwd File Access and Exfiltration in HTTP Traffic
https://dispatch.thorcollective.com/p/a-deathcon-thrunting-workshop-overview-part-3
0
3
2
reposted by
THOR Collective
sydney
8 months ago
🚀 THOR Collective Dispatch is live! Your go to source for threat hunting insights and community-driven content. 📩 Check it out & subscribe:
dispatch.thorcollective.com
We appreciate any support, every spark keeps the fire burning. 🔥
#threathunting
#cybersecurity
#THORCollective
loading . . .
THOR Collective Dispatch | Sydney Marrone | Substack
A hub for threat hunters (thrunters) and security professionals. Explore cutting-edge ideas, practical frameworks, and community-driven insights in cybersecurity. Powered by collaboration, innovation,...
https://dispatch.thorcollective.com
0
1
1
reposted by
THOR Collective
LP
9 months ago
@thorcollective.bsky.social
dropped a new blog "Helloooooooo, Thrunters!" 😤 It kicks off a series from a workshop
@letswastetime.bsky.social
and I gave at
#DEATHCon
on
#threathunting
with the PEAK framework. Read at:
thorcollective.com/helloooooooo...
#cybersecurity
#thrunting
#THORCollective
loading . . .
Helloooooooo thrunters 👋
A DEATHCON Thrunting Workshop Overview
https://thorcollective.com/helloooooooo-thrunters-c654b3c88ccb
0
4
3
reposted by
THOR Collective
sydney
9 months ago
@thorcollective.bsky.social
dropped a new blog "Helloooooooo, Thrunters!" 😤 It kicks off a series from a workshop
@jotunvillur.bsky.social
and I gave at
#DEATHCon
on
#threathunting
with the PEAK framework. Start reading:
thorcollective.com/helloooooooo...
#cybersecurity
#thrunting
#THORCollective
loading . . .
Helloooooooo thrunters 👋
A DEATHCON Thrunting Workshop Overview
https://thorcollective.com/helloooooooo-thrunters-c654b3c88ccb
0
3
2
you reached the end!!
feeds!
log in