New hunt

A hunt is a saved detection: name it, give it one anchor that says what to match, and every scan — past and future — is checked against it. Anchor on something distinctive to the threat (a phishing-page query, a credential-POST script) — never a shared library, or you will flag legitimate sites.