Skip to content
Security
Command

/map-environment

Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots

From plugin
thrunt-god
4156 skills18 agents56 commands5 hooks

Command definition

map-environment.md
name: hunt:map-environment
description: Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots
allowed-tools:
  - Read
  - Bash
  - Write
  - AskUserQuestion
  - Task

<objective> Create or refresh the environment map for this hunt program or case.

**Creates or updates:**

  • `.planning/environment/ENVIRONMENT.md`
  • `.planning/MISSION.md`
  • `.planning/HYPOTHESES.md`
  • `.planning/STATE.md`

Unknown tenants, tools, retention windows, access paths, and blind spots must remain `TBD` until the operator confirms them. Confirmed environment facts should replace existing `TBD` markers immediately; only unresolved fields should stay `TBD`.

**After this command:** Run `/hunt:shape-hypothesis` or `/hunt:plan 1`. </objective>

<execution_context> @~/.claude/thrunt-god/workflows/hunt-map-environment.md @~/.claude/thrunt-god/templates/environment-map.md </execution_context>

<process> Execute the environment-mapping workflow from @~/.claude/thrunt-god/workflows/hunt-map-environment.md. Prefer concrete environment facts over generic best practices. Preserve existing analyst notes. Default behavior is to preserve confirmed facts and leave unknown values as `TBD` rather than populating simulated environment details. Replace `TBD` only where live workspace evidence or direct operator input confirms the fact. </process>

@backbay-labs
Ships withthrunt-god

Threat hunting command system for agentic IDEs

Stars on GitHub

Momentum

stars in total
41
Star history of backbay-labs/thrunt-god on GitHub, a chart by star-history.com

Other commands on thrunt-god.

new-program

new-program

Command

Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories

plan

plan

Command

Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs

run

run

Command

Execute a hunt phase with parallel telemetry work, query logging, receipt generation, and optional wave targeting

More commands from other plugins.

deslop-reborn

deslop-reborn

Command

One iteration of the IronClaw Reborn de-slop loop — take ONE Reborn crate, fan out parallel review sub-agents (thermo-nuclear…

ironclaw12d13k
@nearai@nearaiInstall Command
audit

audit

Command

Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…

@trailofbits@trailofbitsInstall Command
arsenal

arsenal

Command

Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…

@awarexone@awarexoneInstall Command