Working as a Threat Hunt Analyst with Splunk in the Security Operations Centre (SOC) at GovWare 2025 has proved to be both enjoyable and challenging. We frequently observed infected hosts connecting ...