# MISP Workbench - MITRE ATT&CK Pattern Hunts

**URL:** <https://discourse.ossbase.org/t/misp-workbench-mitre-att-ck-pattern-hunts/1065>\
**Category:** hackathon.lu\
**Tags:** misp-workbench, hackathon-2026\
**Created:** [April 15, 2026, 1:21pm UTC](https://discourse.ossbase.org/t/misp-workbench-mitre-att-ck-pattern-hunts/1065 "2026-04-15T13:21:28Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![righel](https://discourse.ossbase.org/user_avatar/discourse.ossbase.org/righel/32/19_2.png) [@righel](https://discourse.ossbase.org/u/righel)\
**Post date:** [April 15, 2026, 1:21pm UTC](https://discourse.ossbase.org/t/misp-workbench-mitre-att-ck-pattern-hunts/1065/1 "2026-04-15T13:21:28Z")

</div>

**MISP Workbench now supports MITRE ATT&CK Pattern hunts!**

Track one or more TTPs and receive instant alerts whenever a new attribute or event matches a tag from the MISP MITRE ATT&CK Pattern Galaxy.

 ![image](https://discourse.ossbase.org/uploads/default/original/1X/910894faa0e2499d24293b2c2cb0228782fa75b5.png)

See docs:

> **[MITRE ATT&CK (mitre-attack-pattern) - Hunts - misp-workbench documentation](https://misp-workbench.readthedocs.io/en/latest/features/hunts/#mitre-attck-mitre-attack-pattern)**
>
> Hunts are saved searches that can run against the OpenSearch index, an external vulnerability database, or a detection rule registry. Each hunt stores a query, an index target, and a run history so you can track how match counts evolve over time. | A...

See PR:

> <https://github.com/MISP/misp-workbench/pull/279>