Introducing Sift: Automated Threat Hunting

The blog post introduces Sift, a new tool from GreyNoise that helps threat hunters filter out noise and prioritize investigation of potentially malicious web traffic. Sift uses AI techniques like large language models to analyze HTTP requests seen across GreyNoise's sensor network and generate reports on new and relevant threats. The reports describe and analyze suspicious payloads, estimate the threat level, provide contextual tags/information on associated IPs, and suggest Suricata rules to detect similar traffic. This allows analysts to focus …

automated blog blog post filter greynoise http http requests hunters hunting investigation language language models large malicious network noise prioritize relevant reports requests sensor sift techniques threat threat hunting threats tool traffic web web traffic