- new API endpoints for querying metadata by IOC - new IOC known host management endpoints - live hunt feed command - live hunts are tied to rulesets, these are used to start and stop live hunts - live/historical hunt results commands to get and delete individual entries