> For the complete documentation index, see [llms.txt](https://docs.cloudcyte.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.cloudcyte.com/getting-started/configuring-modules/network-security.md).

# Threat Hunting

Threat Hunting module provides a service to find malicious activity or settings in your infrastructure.  It is integrated with the Broker module. The Sensor module collects information based on policies defined, and the Threat Huntering module runs analysis rules on collected data to catch malicious activities.