thrunt-god

Show available THRUNT threat hunting commands and artifact layout

Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots

Initialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion

Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories

Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs

Publish a hunt as a case report, escalation, detection promotion, or leadership summary

Execute a hunt phase with parallel telemetry work, query logging, receipt generation, and optional wave targeting

Turn a signal into testable hunt hypotheses, scope, datasets, and success criteria

Validate hunt conclusions against receipts, contradictory evidence, and success criteria

Add an idea to the backlog parking lot (999.x numbering)

Add phase to end of current milestone in huntmap

Generate tests for a completed phase based on Evidence Review criteria and implementation

Capture idea or task as todo from current conversation context

Cross-phase audit of all outstanding Evidence Review and findings validation items

Audit milestone completion against original intent before archiving

Run all remaining phases autonomously — discuss→plan→execute per phase

List pending todos and select one to work on

Archive accumulated phase directories from completed milestones

Archive completed milestone and prepare for next version

Systematic debugging with persistent state across context resets

Route freeform text to the right hunt or THRUNT command automatically

Execute a trivial task inline — no subagents, no planning overhead

Post-mortem investigation for failed THRUNT workflows — analyzes git history, artifacts, and state to diagnose what went wrong

Diagnose planning directory health and optionally repair issues

Show available THRUNT commands and usage guide

Insert urgent work as decimal phase (e.g., 72.1) between existing phases

Find the current THRUNT community channels

Surface the agent's assumptions about a phase approach before planning

List active THRUNT workspaces and their status

Interactive command center for managing multiple project or hunt phases from one terminal

Generate a comprehensive project summary from milestone artifacts for team onboarding and review

Create an isolated workspace with repo copies and independent .planning/

Automatically advance to the next logical step in the active hunt or THRUNT workflow

Zero-friction idea capture. Append, list, or promote notes to todos.

Create context handoff when pausing work mid-phase

Create phases to close all gaps identified by milestone audit

Capture a forward-looking idea with trigger conditions — surfaces automatically at the right milestone

Create a clean PR branch by filtering out .planning/ commits — ready for code review

Generate developer behavioral profile and create Claude-discoverable artifacts

Check project or hunt progress, show context, and route to the next action