help
CommandShow available THRUNT threat hunting commands and artifact layout
Resume project or hunt work from the previous session with full context restoration
name: thrunt:resume-work description: Resume project or hunt work from the previous session with full context restoration allowed-tools: - Read - Bash - Write - AskUserQuestion - SlashCommand
<objective> Restore complete hunt context and resume the active workflow seamlessly from the previous session.
Routes to the resume-program workflow which handles:
</objective>
<execution_context> @~/.claude/thrunt-god/workflows/resume-program.md </execution_context>
<process> **Follow the resume-program workflow** from `@~/.claude/thrunt-god/workflows/resume-program.md`.
The workflow handles all resumption logic including:
1. Hunt existence check 2. STATE.md loading or reconstruction 3. Detection of the active mission and huntmap 4. Checkpoint and incomplete work detection 5. Visual status presentation 6. Context-aware option offering 7. Routing to the appropriate next command 8. Session continuity updates </process>
Show available THRUNT threat hunting commands and artifact layout
Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots
Initialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion
Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories
Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs
Publish a hunt as a case report, escalation, detection promotion, or leadership summary
Audit a file, directory, or whole repo for insecure default configuration: fallback secrets, default credentials, fail-open…
Check text against AGT prompt-injection, context-poisoning, and MCP threat detectors.
Show which external bug-bounty tools are installed on this machine and print install hints for the missing ones. Curated from…