help
CommandShow available THRUNT threat hunting commands and artifact layout
Interactive command center for managing multiple project or hunt phases from one terminal
name: thrunt:manager description: Interactive command center for managing multiple project or hunt phases from one terminal allowed-tools: - Read - Write - Bash - Glob - Grep - AskUserQuestion - Task
<objective> Single-terminal command center for managing a milestone or hunt campaign. Shows a dashboard of all phases with visual status indicators, recommends optimal next actions, and dispatches work. In hunt mode that means shape/plan/run; in THRUNT utility mode it means management, audit, and workspace flows.
Designed for power users who want to parallelize work across phases from one terminal: shape or discuss a phase while another plans or runs in the background.
**Creates/Updates:**
**After:** User exits when done managing, or all phases complete and the appropriate publish/verify lifecycle is suggested. </objective>
<execution_context> @~/.claude/thrunt-god/workflows/manager.md @~/.claude/thrunt-god/references/ui-brand.md </execution_context>
<context> No arguments required. Requires `MISSION.md`, `HUNTMAP.md`, and `STATE.md`.
Project context, phase list, dependencies, recommendations, and workflow mode are resolved inside the workflow using `thrunt-tools.cjs init manager`. No upfront context loading needed. </context>
<process> Execute the manager workflow from @~/.claude/thrunt-god/workflows/manager.md end-to-end. Maintain the dashboard refresh loop until the user exits or all phases complete. </process>
Show available THRUNT threat hunting commands and artifact layout
Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots
Initialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion
Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories
Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs
Publish a hunt as a case report, escalation, detection promotion, or leadership summary
Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…
Check text against AGT prompt-injection, context-poisoning, and MCP threat detectors.
Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…