3dcom2711

hunt-new-case

Initialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion

hunt-new-program

Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories

hunt-run

Execute a hunt phase with parallel telemetry work, query logging, receipt generation, and optional wave targeting

thrunt-complete-milestone

Archive completed milestone and prepare for next version

thrunt-debug

Systematic debugging with persistent state across context resets

thrunt-forensics

Post-mortem investigation for failed THRUNT workflows — analyzes git history, artifacts, and state to diagnose what went wrong

hunt-map-environment

Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots

hunt-plan

Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs

hunt-publish

Publish a hunt as a case report, escalation, detection promotion, or leadership summary

hunt-shape-hypothesis

Turn a signal into testable hunt hypotheses, scope, datasets, and success criteria

hunt-validate-findings

Validate hunt conclusions against receipts, contradictory evidence, and success criteria

thrunt-add-backlog

Add an idea to the backlog parking lot (999.x numbering)

thrunt-add-tests

Generate tests for a completed phase based on Evidence Review criteria and implementation

thrunt-add-todo

Capture idea or task as todo from current conversation context

thrunt-audit-milestone

Audit milestone completion against original intent before archiving

thrunt-autonomous

Run all remaining phases autonomously — discuss→plan→execute per phase

thrunt-do

Route freeform text to the right hunt or THRUNT command automatically

thrunt-fast

Execute a trivial task inline — no subagents, no planning overhead

thrunt-insert-phase

Insert urgent work as decimal phase (e.g., 72.1) between existing phases

thrunt-list-phase-assumptions

Surface the agent's assumptions about a phase approach before planning

thrunt-manager

Interactive command center for managing multiple project or hunt phases from one terminal

thrunt-milestone-summary

Generate a comprehensive project summary from milestone artifacts for team onboarding and review

thrunt-new-workspace

Create an isolated workspace with repo copies and independent .planning/

thrunt-next

Automatically advance to the next logical step in the active hunt or THRUNT workflow

thrunt-note

Zero-friction idea capture. Append, list, or promote notes to todos.

thrunt-plan-milestone-gaps

Create phases to close all gaps identified by milestone audit

thrunt-plant-seed

Capture a forward-looking idea with trigger conditions — surfaces automatically at the right milestone

thrunt-pr-branch

Create a clean PR branch by filtering out .planning/ commits — ready for code review

Data & Documents Listed

thrunt-profile-user

Generate developer behavioral profile and create Claude-discoverable artifacts

thrunt-progress

Check project or hunt progress, show context, and route to the next action

Web & Frontend Listed

thrunt-quick

Execute a quick task with THRUNT guarantees (atomic commits, state tracking) but skip optional agents

thrunt-remove-phase

Remove a future phase from huntmap and renumber subsequent phases

thrunt-resume-work

Resume project or hunt work from the previous session with full context restoration

thrunt-review-backlog

Review and promote backlog items to active milestone

thrunt-review

Request cross-AI peer review of phase plans from external AI CLIs

thrunt-settings

Configure THRUNT workflow toggles and model profile

thrunt-add-phase

Add phase to end of current milestone in huntmap

thrunt-audit-evidence

Cross-phase audit of all outstanding Evidence Review and findings validation items

thrunt-check-todos

List pending todos and select one to work on

thrunt-health

Diagnose planning directory health and optionally repair issues

thrunt-pause-work

Create context handoff when pausing work mid-phase

thrunt-reapply-patches

Reapply local modifications after a THRUNT update

thrunt-remove-workspace

Remove a THRUNT workspace and clean up worktrees

Data & Documents Listed

thrunt-session-report

Generate a session report with token usage estimates, work summary, and outcomes

thrunt-list-workspaces

List active THRUNT workspaces and their status

hunt-help

Show available THRUNT threat hunting commands and artifact layout

thrunt-cleanup

Archive accumulated phase directories from completed milestones

thrunt-help

Show available THRUNT commands and usage guide

thrunt-join-discord

Find the current THRUNT community channels