ThreatHunt/ROADMAP.md

ThreatHunt — Roadmap (Intent-Level)

This roadmap reflects analytical evolution only.

Near Term

• Better CSV ingestion resilience
• Stronger artifact normalization
• Improved analyst annotations
• Expanded VirusTotal usage

Mid Term

• Additional enrichment sources
• Pattern and clustering analysis
• Analyst hypothesis tracking
• Cross-hunt correlation views

Long Term

• Assisted analysis suggestions
• Historical trend analysis
• Exportable intelligence products

---

Explicit Non-Goals

• Live endpoint interaction
• Automated remediation
• Workflow orchestration
• Acting without analyst review