Threat Hunting research

883 papers · Investigation type

Threat hunting starts with a question or hypothesis about possible threat activity and examines available observations for evidence. Research can inform how that question is framed, which signals are examined and how a result is validated.

Scope of this collection

This bibliography uses ALEX’s Threat Hunting investigation-type assignment. It draws on different subjects, including threat intelligence, network security and machine learning. Membership reflects the stored application classification rather than an assertion that a paper describes a complete operational hunting workflow.

Using this research

Compare the data a method requires, the time period it covers and the process used to verify a signal. Distinguish absence of an observation from evidence that an activity did not occur. Evaluate a proposed technique against the visibility and error costs of the investigation in which it might be used.

References reproduce the metadata held by ALEX. Missing author, year or source details are identified in the listing. Publication years are shown as recorded; collection and retrieval dates are not substituted. Follow the original source to verify a citation.

Bibliography

Showing 1–50 of 883 papers, ordered by publication year (newest first), then title.

Earlier research · five years or older Historical reference

Age markers as of 2026-11-06.

"Extended IP Threat Intelligence Classification Dataset for AIOps-Based Network Connection Management"
Francisco Nobre (2026) · IEEE DataPort
Paper details
View paper · Open ALEX record
"GIFT\u2013GAJA Human-Centric Threat Modeling Dataset for Medical Cyber-Physical Systems in Neonatal Intensive Care Unit Programs"
Gift T. Gaja (2026) · IEEE DataPort
Paper details
View paper · Open ALEX record
"How can natural language processing improve cybersecurity threat detection?"
Sayma Nasrin Shompa (2026) · Mustansiriyah Journal of Pure and Applied Sciences
Paper details
View paper · Open ALEX record
"I Know What to Click and What to Avoid": Gender Differences in Cybersecurity Awareness among Adolescent AI Users
D Manoj Kumar; Nilakshi Adhikari; Dr. Nagendra Kumar (2026) · Zenodo (CERN European Organization for Nuclear Research)
Paper details
View paper · Open ALEX record
"Iot-cloud-sec"
Raju Molla (2026) · IEEE DataPort
Paper details
View paper · Open ALEX record
Cyber Threat Intelligence Sharing and Collaboration
Safa Mohamed (2026) · Figshare
Paper details
View paper · Open ALEX record
Cyber Warfare and National Security Implications
Safa Mohamed; Sarah Ali (2026) · Figshare
Paper details
View paper · Open ALEX record
Deception Technology for Active Defense
Safa Mohamed; Maram Ahamed (2026) · Figshare
Paper details
View paper · Open ALEX record
SHIELD: A Six-Layer AI-Enabled Cybersecurity Framework for ICS/OT Environments
Muhammad Zeeshan Khan (2026) · Figshare
Paper details
View paper · Open ALEX record
A blockchain-assisted secure federated learning architecture for intrusion detection in internet of things networks
Muhammad Kamran; Salwa Muhammad Akhtar; Anusha Gilani; Asma A. Alhashmi; Sawera Kanwal; Abdulbasit A. Darem; Adel A. Alofairi (2026) · Scientific Reports
Paper details
View paper · Open ALEX record
A causality-aware and explainable intelligence framework for secure and resilient cloud systems
Selvam Lakshmanan; Tamizhselvi Annamalai; Tamizharasu Kamalesan; Sethupathi Venugopal (2026) · Scientific Reports
Paper details
View paper · Open ALEX record
A Comparative Analysis of the Deep Web and Dark Web: Architecture, Anonymity, and Cybersecurity Implications
Harshith V Malipatil (2026) · Zenodo (CERN European Organization for Nuclear Research)
Paper details
View paper · Open ALEX record
A Comprehensive Review of Cyber Security Threats in Modern Systems
Ravi Teja Shettigari; Rajeshwari G (2026) · International Scientific Journal of Engineering and Management
Paper details
View paper · Open ALEX record
A Comprehensive Survey on Anomaly Detection Techniques for Suspicious File Migration in Cloud Computing Environments
Anurag Tyagi; Atul Saini; Ayush Garg; Ayush Gupta; Priyanka (2026) · Zenodo (CERN European Organization for Nuclear Research)
Paper details
View paper · Open ALEX record
A Cost-Benefit Analysis of Zero Trust Architecture (ZTA) Using Hybrid Financial Impact and Threat Mitigation Strategy
Martin Ugong; Siti Hajar Othman (2026) · International Journal of Innovative Computing
Paper details
View paper · Open ALEX record
A Cyber-Twin Based Honeypot for Gathering Threat Intelligence of Critical Infrastructure
Muhammad Azmi Umer; Xuna Zhan; Yan Lin Aung; Aditya P. Mathur; Jianying Zhou (2026) · ACM Workshop on Secure and Trustworthy Cyber-Physical Systems (SaT-CPS)
Paper details
View paper · Open ALEX record
A Deception-Based Intrusion Prevention Framework for Proactive Network Security Using Behavioral Threat Analysis
Priyanka Tuppad; Vinit Kumar Shukla (2026) · International Journal For Multidisciplinary Research
Paper details
View paper · Open ALEX record
A deep generative adversarial framework with rat-optimized feature selection for efficient intrusion detection in large-scale cloud network traffic environments
S. Priya; K. Tamilarasi; Vivek Kumar Sharma; Prabu Kaliyaperumal; Balamurugan Balusamy; Samia Kouki; M. L. Alphin Ezhil Manuel; Arun Kumar Elengovan (2026) · Discover Computing
Paper details
View paper · Open ALEX record
A Deep Learning based Intrusion Detection System for Threat Detection in Metaverse Environment
Fatema Salem Alqaydi; Emad Bataineh; Neema Prakash (2026) · International Conference on Artificial Intelligence Management and Trends
Paper details
View paper · Open ALEX record
A Deep Learning-Based User Behavior Analytics Model for Proactive Cyber Threat Detection and Risk Management: A Review
Paul Akampurira; Enerst Edozie; Bashir Olaniyi Sadiq; Mohammed Dahiru Buhari (2026) · F1000Research
Paper details
View paper · Open ALEX record
A Detection Taxonomy for Quantum-Enabled Cyber Attacks: A Systems-Level Framework for Pre-CRQC Threat Monitoring
Robert E. Campbell (2026) · MDPI AG
Paper details
View paper · Open ALEX record
A Game-Theoretic Framework for Cyber Governance in a World of Persistent Threat
Marilyn Sithole; Odette Swart (2026) · International Journal of Business Ecosystem & Strategy (2687-2293)
Paper details
View paper · Open ALEX record
A GWO-optimized dual-attention CNN-LSTM model for robust IIoT intrusion detection
Jianjun Wang; Rupesh Mishra; Suman Singh; Anurag Sinha; Surinder Kaur; Madhumathi R; Shubhang Mishra; Pratham Dedhia (2026) · Peer-to-Peer Networking and Applications
Paper details
View paper · Open ALEX record
A Hybrid AI-Driven Cybersecurity Framework For Real-Time Threat Detection Using Big Data Analytics
Gyanendra Kumar Gautam; Dr. Uday Pratap Singh (2026) · International Journal for Research in Applied Science and Engineering Technology
Paper details
View paper · Open ALEX record
A HYBRID AI-DRIVEN THREAT DETECTION FRAMEWORK FOR STRENGTHENING CYBERSECURITY IN CRITICAL INFRASTRUCTURE
Akella, Pathanjali Sastri,; Akella, Arun kumar (2026)
Paper details
View paper · Open ALEX record
A Hybrid Approach for Insider Threats Detection Using System Call Analysis and Malware API Monitoring
Pathuri Rama Krishna (2026) · International Journal for Research in Applied Science and Engineering Technology
Paper details
View paper · Open ALEX record
A Hybrid Blockchain-Based Framework for Adaptive Cyber-Risk Prediction and Multi-Layer Threat Mitigation in Enterprise Networks
Udit Mamodiya; Indra Kishor; Rahat Naz; Mohammed Almaiah; Amer Alqutaish (2026) · Journal of Cybersecurity and Privacy
Paper details
View paper · Open ALEX record
A Hybrid Deep Learning and Attention Fusion Framework for Intelligent Zero-Day Threat Detection in Cloud Web Application Firewalls
P Senthil Kumar; Daram Kusuma Kumari (2026) · Zenodo (CERN European Organization for Nuclear Research)
Paper details
View paper · Open ALEX record
A Hybrid Deep Learning-Based Intrusion Detection System for IOT Devices
F.C Uzoezie (2026) · International Journal of Computer Science and Mathematical Theory
Paper details
View paper · Open ALEX record
A Hybrid Explainable AI Framework for Cyber Threat Detection and Response
Yashika Bajaj (2026) · Springer Science and Business Media LLC
Paper details
View paper · Open ALEX record
A Hybrid FT-Transformer-Mamba Framework with SBSA Optimization and Blockchain-ECC Cyber Resiliency for Advanced Persistent Threat Detection
Diana Arulkumar; K. Kartheeban (2026) · International Journal of Intelligent Engineering and Systems
Paper details
View paper · Open ALEX record
A hybrid HSA-ADASYN framework for robust intrusion detection in imbalanced IoT environments
Tibebu Bekele Shana; Mayank Agarwal; Ebenezer Esenogho; Samrat Mondal (2026) · Discover Computing
Paper details
View paper · Open ALEX record
A hybrid transformer-BiLSTM model optimized with Firefly Algorithm for network traffic anomaly detection
Debiao Luo; Weijie Wang; Xinyue Liu; Wen Yang; Ke Hu; Jia Zhang (2026) · PLOS One
Paper details
View paper · Open ALEX record
A Machine Learning-Based Data Model for Cybersecurity Resiliency Assessment and Predictive Analysis
Riyadh Jasim Mohammad; Ali Broumandnia; Razieh Farazkish; Mona Moradi (2026) · KSII Transactions on Internet and Information Systems
Paper details
View paper · Open ALEX record
A machine-learning-based system for real-time advanced persistent threat detection and prediction
Ibrahim Ghafir (2026) · e-space (Manchester Metropolitan University)
Paper details
View paper · Open ALEX record · Source page
A Malicious Policy Detection Approach Enhanced by Threat Knowledge in LLM-Based Embodied Robots
Mengjie Sun; Yaowen Zheng; Shichao Lv; Zhi Li; Kaixiang Liu; Yuncheng Wang; Yongle Chen; Limin Sun (2026) · ICASSP 2026 - 2026 IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP)
Paper details
View paper · Open ALEX record
A metaheuristic feature selection model using bat optimization for malicious URL attack detection
Omar Almomani; Mahran Al-Zyoud; Yazeed Alsarhan; Ammar Almomani; Thair Khdour; Khaled Mohammad Alomari; Said A. Salloum (2026) · Scientific Reports
Paper details
View paper · Open ALEX record
A model-driven knowledge graph treatment for process-centric cyber threat mitigation
Andrei Chiș; Ana-Maria Ghiran; Robert Andrei Buchmann (2026) · Knowledge and Information Systems
Paper details
View paper · Open ALEX record
A moving-target-defense architecture for protecting against ransomware and data exfiltration
Mohammed A. Makarem; Ashraf Mahmoud; Abdallah Moubayed; Anas A. Abudaqa; Ehab Al-Shaer; Tarek Sheltami (2026) · Scientific Reports
Paper details
View paper · Open ALEX record
A multi-agent RAG framework for telecom cybersecurity: Multi-generational threat intelligence and SOC assistance
Latifa Guesmi; Ameni Mejri; Sarra Aissaui (2026) · Journal of Intelligent & Fuzzy Systems: Applications in Engineering and Technology
Paper details
View paper · Open ALEX record
A Multi-Class Web Intrusion Detection System Using Deep Learning
Hiba Allah Ziyad; Amer Abdulmajeed Abdulrahman (2026) · Ibn AL-Haitham Journal For Pure and Applied Sciences
Paper details
View paper · Open ALEX record
A Multi-Modal Autonomous Framework for Cyber Threat Intelligence across Heterogeneous Web Environments
Subramani S (2026) · International Journal for Research in Applied Science and Engineering Technology
Paper details
View paper · Open ALEX record
A Multi-National Framework for Real-Time Collaborative Cyber Defense: Evaluating FL Architectures and Aggregation Strategies in Heterogeneous NIDS
Abhiram T Sajeev; Adarsh S J; Alen J S; Alfin Jerome; Amila A L (2026) · IJARCCE
Paper details
View paper · Open ALEX record
A multi-task information extraction dataset for Chinese APT cyber threat intelligence
Lu Sun; Ga Xiang; Zicheng Tan; Zhaozhong Guo; Rui Qi; Jun Cao (2026) · Scientific Data
Paper details
View paper · Open ALEX record
A multifactor model of countering targeted attacks within the framework of an infinite antagonistic game scheme
Arkadii Chikrii; Valerii Lakhno; Volodimir Malyukov; Alona Desiatko; Inna Malyukova; Tetiana Zhyrova; Nataliia Kotenko (2026) · International Journal of Electronics and Telecommunications
Paper details
View paper · Open ALEX record
A Novel FFUEAT Technique Enhancing the Performance of Multiple URL Classification and Cybersecurity using RNN and Transformer-based Models
Zafar Ali; Siti Sophiayati Yuhaniz; Noureen Noureen; Ghulam Mujtaba; Husham M. Ahmed (2026) · Baghdad Science Journal
Paper details
View paper · Open ALEX record
A pattern-aware LSTM-based approach for APT detection leveraging a realistic dataset for critical infrastructure security
Eider Iturbe; Christos Dalamagkas; Panagiotis Radoglou-Grammatikis; Erkuden Rios; Nerea Toledo (2026) · Future Generation Computer Systems
Paper details
View paper · Open ALEX record
A Public Key Infrastructure-Based Threat Intelligence Sharing Model for Government Agencies: A Secure Architecture for Inter-Agency Cyber Collaboration
Hayford Ntiamoah Ofosu (2026) · Zenodo (CERN European Organization for Nuclear Research)
Paper details
View paper · Open ALEX record
A Qualitative Synthesis of Cyberattack Trends in Managed Service Providers: Analyzing Multi-Tenant Vulnerabilities and Mitigation Strategies
Shiva Ram Neupane; Neeraj Shrestha; Weiqing Sun (2026) · Information
Paper details
View paper · Open ALEX record
A Real-Time eBPF-Based Intrusion Detection Framework for Adaptive and Scalable Linux Kernel Security
Maryam Alaa Zaki; Nuha Omran Abokhdair (2026) · Al-Farooq Journal of Sciences
Paper details
View paper · Open ALEX record

Explore another perspective

These collections offer a different way into the library; their bibliographies need not contain the same papers.

Cyber Threat Intelligence · Research category
AI/ML for Security · Research category
Incident Response · Investigation type