IoC Hunting Skill Hunt indicators of compromise (IoCs) across Dynatrace logs and spans , and optionally correlate CVEs and attacker-IPs/MITRE techniques through ( ). Produces matched-observable evidence sets and an AI threat-exposure score (0–100%). Universal Best Practices 1. Load only when you write or adapt DQL beyond a canonical template — run a routed reference's template as written (placeholders substituted) without it; load it before changing the query shape (new commands, joins, functions) and on the first query error. DQL syntax and function names differ from SQL. 2. Ground every que…