Hunt Leads are actionable intelligence extracted from your deception layer. Every IOC and IOA below was confirmed by adversary interaction with a decoy — zero false positives. Use the auto-generated Splunk and Sigma queries to hunt for the same activity in your production environment. If you find matches, the adversary has moved beyond the deception layer into real infrastructure.