sydney
letswastetime.bsky.social
sydney
@letswastetime.bsky.social
| search "thrunter"
| eval specialty="Purple Team, Treat Hunter, Lifting Heavy Things"
Have you ever run the best hunt of your life and then forget how two weeks later?
Same.

Meet the PEAK Threat Hunting Template. Built to make your hunts repeatable, reviewable, and impossible to lose.

👉 Read on THOR Collective Dispatch - dispatch.thorcollective.com/p/the-peak-t...
November 13, 2025 at 8:47 PM
🎤 The Autonomous SOC (Taylor’s Version)
Guest post with @kassafras09.bsky.social

AI hype is loud. Most teams are just automating chaos.
Fix the basics first. Then scale the magic.

Read it on @thorcollective.bsky.social Dispatch.

dispatch.thorcollective.com/p/the-autono...
The Autonomous SOC (Taylor’s Version)
Opening Act: Welcome to the SOC Show
dispatch.thorcollective.com
November 11, 2025 at 3:41 PM
In the latest @thorcollective.bsky.social guest post, Sam Hanson breaks down two TTP-driven hunts — KurtLar_SCADA and a weird .NET Modbus binary — proving simple hypotheses > chasing IOCs.

IOCs show where the fire was.
TTPs show where it will be.

dispatch.thorcollective.com/p/hunting-be...
dispatch.thorcollective.com
November 6, 2025 at 3:45 PM
October delivered AI agents, time mastery, and purple team curveballs. From scaling hunts like code to aligning GRC with threat-informed defense, this month’s Dispatch lineup from @thorcollective.bsky.social hit every layer of the stack.

Full recap here:
dispatch.thorcollective.com/p/dispatch-d...
Dispatch Debrief: October 2025
Seven Dispatch drops that prove hunting smarter beats hunting harder.
dispatch.thorcollective.com
October 30, 2025 at 3:15 PM
Finding nothing ≠ failing the hunt.
Sometimes “nothing” is the loudest signal that your defenses worked.

@jotunvillur.bsky.social breaks down how to measure the quiet wins in in one of my favorite @thorcollective.bsky.social Dispatch posts:

dispatch.thorcollective.com/p/measuring-...
Measuring the Hunt When You Find “Nothing”
Because sometimes success looks like silence.
dispatch.thorcollective.com
October 28, 2025 at 3:03 PM
In this week’s @thorcollective.bsky.social Dispatch, Sam Hanson lays out how to move beyond indicator-based hunting and build detection muscle that actually scales.

👉 dispatch.thorcollective.com/p/hunting-be...
October 9, 2025 at 7:01 PM
If tstats gives you speed and eventstats gives you context...timechart gives you shape.

This week’s @thorcollective.bsky.social SPL Dispatch breaks down how to use timechart to uncover rhythm, automation, and the a cron job masquerading as “normal.”

dispatch.thorcollective.com/p/the-shape-...
dispatch.thorcollective.com
October 7, 2025 at 11:15 PM
Threat hunting falls apart when your “docs” live in Slack threads.

Part 2 of the @thorcollective.bsky.social Dispatch Agentic Threat Hunting series covers the first step to scaling: put your hunts in a GitHub repo and give your AI bestie memory.

dispatch.thorcollective.com/p/agentic-th...
October 2, 2025 at 10:15 PM
✨ To get you ready for Taylor Swift’s latest album… ✨

🎶 Check out Life of a Detection Girl - a playlist I created inspired by Taylor Swift and Alex Hurtado, with a touch of cyber woven in.

Give it a listen and let me know your favorite track!

suno.com/playlist/5cf...
Life of a Detection Girl by @letswastetime | Suno
✨ inspo by alex hurtado & taylor swift ✨
suno.com
October 1, 2025 at 4:18 PM
Reposted by sydney
We at @thorcollective.bsky.social are waking you up before September ends, because a new Ask-a-Thrunt3r episode just dropped with:

2K subscriber milestone 🎉
15 baseline examples
The great data vs. data debate
Plus: Is Git the future of hunting collab?

🎧: dispatch.thorcollective.com/p/ask-a-thru...
Ask-a-Thrunt3r: September 2025 Recap 🐏
Mainly ramblings. And maybe some wisdom.
dispatch.thorcollective.com
October 1, 2025 at 4:26 AM
From temporal to behavioral, baselines are the thrunter’s compass. September’s Dispatch from @thorcollective.bsky.social shows how to use them to sharpen the hunt and includes ten baseline hunts you should be running now.
🔗 dispatch.thorcollective.com/p/dispatch-d...
September 26, 2025 at 3:15 PM
Reposted by sydney
You can’t find weird if you don’t know normal.

@thorcollective.bsky.social
just dropped 10 baseline hunts you can shine in the dark parts of your env and magnify the adversaries from the noise.

Join us for all the thrunting 👉: open.substack.com/pub/thorcoll...

#threathunting #infosec
September 23, 2025 at 8:51 PM
✨ Representation is STILL a security issue. ✨
@thorcollective.bsky.social Dispatch with @kassafras09.bsky.social from March. The message still stands.
• Fix biased job reqs
• Put diverse voices on panels
• Mentor future hackers
• Model inclusive leadership
dispatch.thorcollective.com/p/why-we-nee...
Why We Need More Women and Intersectional Diversity in Cyber (And How to Get There)
Representation matters in cybersecurity. Here’s why—and what we can do about it.
dispatch.thorcollective.com
September 18, 2025 at 3:49 PM
Cybersecurity needs more than hackers in hoodies.

In this week’s @thorcollective.bsky.social Dispatch, Courtney Shar shares how project management skills like risk alignment, process design, and team coordination directly strengthen security programs.

👉 dispatch.thorcollective.com/p/beyond-hac...
dispatch.thorcollective.com
September 16, 2025 at 3:15 PM
Reposted by sydney
🚨New post on @thorcollective.bsky.social Dispatch 🚨

Certis Foster didn't hunt for it.
It revealed itself.

The key? Plotting behavior in 3D space:

🕒 Time
🗺️ Terrain
🎯 Behavior

Outliers can’t hide in 3D.

dispatch.thorcollective.com/p/cant-hide-...

#threathunting #thrunting #THORcollective
Can't Hide in 3D
In a sea of millions of security events, one workstation literally stood out, floating high above all the others when I transformed flat logs into a 3D visualization.
dispatch.thorcollective.com
September 5, 2025 at 12:31 AM
If you don’t know what “normal” looks like in your environment, you’re not hunting...you’re hoping.

Our latest @thorcollective.bsky.social Dispatch post breaks down 5 baselines every thrunter needs.

Map normal. Track drift. Catch threats.

Read here: dispatch.thorcollective.com/p/you-cant-f...
You Can't Find Weird If You Don't Know Normal
Five baselines with hunt queries you can run today
dispatch.thorcollective.com
September 2, 2025 at 3:15 PM
Summertime sadness hit the Dispatch hard: sunscreen > screen time. 🌞
But the hunts never stopped, and this month we’re back with fresh chaos, AI wisdom, and a noob’s-eye view of DEF CON.

👉 Catch the @thorcollective.bsky.social August Dispatch: dispatch.thorcollective.com/p/dispatch-d...
August 28, 2025 at 3:15 PM
The Quiet War isn’t loud breaches or ransomware. It’s subtle. AI-driven adversaries are blending in and evading detection.

Hunters must shift: hunt intent, not just indicators.

👉 New guest post by Damien Lewke on @thorcollective.bsky.social Dispatch: dispatch.thorcollective.com/p/the-quiet-...
August 21, 2025 at 3:10 PM
What happens when you throw yourself into DEFCON for the very first time? You get Line Con, Noob Village wisdom, hacker merch battles, Flipper Zero impulse buys, Hacker Jeopardy chaos, and the realization that DEFCON is not just a con, it is a community.

dispatch.thorcollective.com/p/my-first-d...
August 19, 2025 at 3:40 PM
It’s here! 🎉 @dr-fett.bsky.social and I coauthored The Threat Hunter’s Cookbook and we’re thrilled to finally share it.

Built for defenders at every level with hunting methods from simple filtering to advanced clustering.

👉 Get the eBook: www.splunk.com/en_us/form/t...
Introducing… The Threat Hunter’s Cookbook! | Splunk
The security experts on the SURGe team have released The Threat Hunter’s Cookbook, a hands-on guide for security practitioners that features actionable insights into threat hunting methods,…
www.splunk.com
August 6, 2025 at 4:17 PM
The Hacker Summer Camp starter pack:
⚡ Stickers
⚡ Patches
⚡ Coins
⚡ Wristbands
⚡ Temporary THRUNT tattoos

Find the @thorcollective.bsky.social crew in Vegas. Say hi and get some swag 👀
August 5, 2025 at 10:41 PM
Reposted by sydney
Shoutout to our fam Elipscion, who's spinning live at DEF CON 33 this Friday at 8pm on the DEF CON stage.
🎧 Listen here: open.spotify.com/artist/2tgPZ...

🔥 Join our @thorcollective.bsky.social meetup during his set. Say hi, talk hunts, and grab some free swag. See you there!
ELIPSCION
Artist · 10 monthly listeners.
open.spotify.com
August 4, 2025 at 5:30 PM
🌵 Calm before the Hacker Summer Camp storm.

July’s Dispatch Debrief is light on posts, heavy on hot takes — from agentic AI to making pentest findings sting.

Catch up before Vegas 👉 dispatch.thorcollective.com/p/dispatch-d...
Dispatch Debrief: July 2025
Consider this the calm before the Hacker Summer Camp storm.
dispatch.thorcollective.com
July 31, 2025 at 9:51 PM
Threat hunting is broken.
We can’t out-query adversaries who automate everything.
Enter the agentic threat hunter. An AI that thinks, hypothesizes, investigates, and scales.

In the latest @thorcollective.bsky.social Dispatch, we explore this shift:

📌 dispatch.thorcollective.com/p/the-agenti...
July 27, 2025 at 4:34 PM
Heading to hacker summer camp?

I wrote a survival guide for DEF CON, Black Hat, etc.

- Pick your purpose
- Villages > talks
- Hallway track is real
- You belong here

👽 dispatch.thorcollective.com/p/con-101-ho...

@thorcollective.bsky.social will be out there with thrunting stickers—come say hi.
July 24, 2025 at 4:21 PM