From dc2dcd02c17518bd87996d8de347cbc63964b93f Mon Sep 17 00:00:00 2001
From: mblanke <mblanke@gmail.com>
Date: Wed, 24 Dec 2025 13:28:52 -0500
Subject: [PATCH] Document Analyst Assist Agents in THREATHUNT_INTENT.md

Added section on Analyst Assist Agents in ThreatHunt.
---
 THREATHUNT_INTENT.md | 10 ++++++++++
 1 file changed, 10 insertions(+)
 create mode 100644 THREATHUNT_INTENT.md

diff --git a/THREATHUNT_INTENT.md b/THREATHUNT_INTENT.md
new file mode 100644
index 0000000..ba57641
--- /dev/null
+++ b/THREATHUNT_INTENT.md
@@ -0,0 +1,10 @@
+## Analyst Assist Agents
+
+ThreatHunt includes analyst-assist agents that:
+- Help interpret imported artifact data
+- Suggest analytical pivots and filters
+- Highlight anomalies or points of interest
+- Assist in forming and testing hypotheses
+
+Agents do not perform analysis independently.
+They guide, explain, and assist the analyst.