Hunt threat-intelligence indicators of compromise (IoCs) across Dynatrace logs and spans and produce a 0-100 threat-exposure score. Extracts and normalizes IoCs — IPs, Domains (hostnames included), URLs, Emails, CVEs, File hashes (md5/sha1/sha256), MITRE TTPs — from unstructured reports, advisories, advisory URLs, pasted text, or STIX, then hunts them in fetch logs and fetch spans.
Install
npx skills add Dynatrace/dynatrace-for-ai --skill dt-sec-ioc-huntingnpx skills add Dynatrace/dynatrace-for-ai --skill dt-sec-ioc-hunting -a claude-code -gnpx skills add Dynatrace/dynatrace-for-ai --skill dt-sec-ioc-hunting -a codex -ggemini skills install https://github.com/Dynatrace/dynatrace-for-ai.git --path skills/dt-sec-ioc-huntinggh skill install Dynatrace/dynatrace-for-ai dt-sec-ioc-huntinggit clone --depth 1 https://github.com/Dynatrace/dynatrace-for-ai /tmp/Dynatrace__dynatrace-for-ai
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/Dynatrace__dynatrace-for-ai/skills/dt-sec-ioc-hunting ~/.claude/skills/dt-sec-ioc-hunting # Claude Code
cp -R /tmp/Dynatrace__dynatrace-for-ai/skills/dt-sec-ioc-hunting ~/.agents/skills/dt-sec-ioc-hunting # Codex, Cursor, Gemini CLI, Copilot, OpenCode