Thrunt-god hunt-plan

Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs

install

source · Clone the upstream repo

git clone https://github.com/backbay-labs/thrunt-god

Claude Code · Install into ~/.claude/skills/

T=$(mktemp -d) && git clone --depth=1 https://github.com/backbay-labs/thrunt-god "$T" && mkdir -p ~/.claude/skills && cp -r "$T/thrunt-god/examples/brute-force-to-persistence/.github/skills/hunt-plan" ~/.claude/skills/backbay-labs-thrunt-god-hunt-plan && rm -rf "$T"

manifest: thrunt-god/examples/brute-force-to-persistence/.github/skills/hunt-plan/SKILL.md

source content

<objective> Plan a hunt phase from the current HUNTMAP.

HUNTMAP.md

remains the source of truth for phase layout and sequencing.

Creates or updates:

```
.planning/phases/[phase-slug]/
```
```
CONTEXT.md
```
```
PLAN.md
```
files
```
.planning/STATE.md
```
```
.planning/HUNTMAP.md
```
when phase metadata changes

After this command: Run

/hunt-run <phase>

. </objective>

<execution_context> @.github/thrunt-god/workflows/hunt-plan.md @.github/thrunt-god/templates/context.md @.github/thrunt-god/templates/phase-prompt.md </execution_context>

<process> Execute the hunt planning workflow from @.github/thrunt-god/workflows/hunt-plan.md. Plans must name the telemetry source, intended evidence, and required receipts. </process>