Telegram RegisterThe public register of Telegram
Telegram profile photo for Threat Hunting & DFIR

Channel

Threat Hunting & DFIR

@DFIRHunting

On this record: Topic · Growth · Engagement · Posts · Telegram's recommendations · Cite this entry

6,866subscribers

+441 since we began measuring on 23 August 2026

Risers and fallers across the register · movement among entries of 3,162–10,000.

Register entry

Telegram ID-1001198453721
TypeChannel
Username@DFIRHunting
CreatedBetween 1 March 2018 and 31 July 2021 — estimated from Telegram’s id allocation, not measured. How this range is calculated.
First recorded23 August 2026
Last confirmed live27 October 2026
Measurements held17
Confirmed unchanged1 time, most recently 27 October 2026
On Telegramt.me/DFIRHunting

Topic

Hacking & security — a classification, not a measurement. An on-box language model (Qwen3.6-35B-A3B-FP8, prompt version 1) read this channel’s own recent posts on 12 September 2026 and assigned it the closest of 31 fixed categories, at 64% confidence. This is a model’s judgement about what the channel is likely to be about, not a fact this register measured the way a subscriber count or a view count is measured — it can be revised on a later pass, and it carries no weight anywhere else on this page. How this classification works, and why it has no browse page of its own yet.

Growth

6,4256,8666,645.523 August 2026 — 6,425 subscribers24 August 2026 — 6,434 subscribers27 August 2026 — 6,455 subscribers30 August 2026 — 6,480 subscribers1 September 2026 — 6,491 subscribers6 September 2026 — 6,519 subscribers11 September 2026 — 6,548 subscribers14 September 2026 — 6,562 subscribers19 September 2026 — 6,586 subscribers28 September 2026 — 6,634 subscribers5 October 2026 — 6,701 subscribers12 October 2026 — 6,736 subscribers15 October 2026 — 6,754 subscribers17 October 2026 — 6,775 subscribers20 October 2026 — 6,820 subscribers24 October 2026 — 6,841 subscribers27 October 2026 — 6,866 subscribers23 August 202627 October 2026
17 measurements spanning 65 days, net +441. Dots are measurements; the straight line between them is drawn to join them, not to claim we know the path taken in between — snapshots are recorded only when a count changes, so gaps mean “no change observed”, never “interpolated”. The vertical axis spans 6,359–6,932 and does not start at zero.
Measurement log — every subscribers count we have recorded
Measured (UTC)SubscribersChange
27 Oct 2026, 06:296,866+25
24 Oct 2026, 05:366,841+21
20 Oct 2026, 22:466,820+45
17 Oct 2026, 22:396,775+21
15 Oct 2026, 04:486,754+18
12 Oct 2026, 08:196,736+35
5 Oct 2026, 19:176,701+67
28 Sept 2026, 14:156,634+48
19 Sept 2026, 03:366,586+24
14 Sept 2026, 23:596,562+14
11 Sept 2026, 08:376,548+29
6 Sept 2026, 14:026,519+28
1 Sept 2026, 22:076,491+11
30 Aug 2026, 07:436,480+25
27 Aug 2026, 06:296,455+21
24 Aug 2026, 09:486,434+9
23 Aug 2026, 11:306,425first reading

Engagement

20 posts held, back to 7 June 2026 — the reader has not yet reached the start of this channel’s public history, so older posts may sit further back, unread. Read across 1 page of Telegram’s post history, 20 posts per page.

Nothing published in the last 30 days. ERR and ER are rolling 30-day measures, so there is nothing to compute — we hold 20 posts for this entry, the most recent from 16 August 2026. An engagement rate over an empty window would be a number about nothing.

Recent posts

16 Aug 2026, 06:13 UTC630 viewsread 23 August 2026

https://letsautomate.it/article/understanding-http-request-headers/

11 Aug 2026, 12:27 UTC≈1,040 viewsread 23 August 2026

https://www.linkedin.com/pulse/hunting-persistence-systemd-units-nobody-checks-taz-wake-u4eke?utm_source=share&utm_medium=member_ios&utm_campaign=share_via

10 Aug 2026, 06:21 UTC≈1,030 viewsread 23 August 2026

https://medium.com/@s.plokas/local-llm-assisted-detection-engineering-with-elastic-and-atomic-red-team-7a9855970f62

23 Jul 2026, 19:33 UTC≈1,710 viewsread 23 August 2026

https://www.linkedin.com/pulse/intelligence-led-hypothesis-driven-threat-hunting-josh-m-safwe?utm_source=share&utm_medium=member_ios&utm_campaign=share_via

22 Jul 2026, 06:14 UTC≈1,490 viewsread 23 August 2026

https://www.linkedin.com/pulse/linux-incident-response-hunting-namespaces-taz-wake-os8oe?utm_source=share&utm_medium=member_ios&utm_campaign=share_via

15 Jul 2026, 08:33 UTC≈1,690 viewsread 23 August 2026

https://blog.crashsecurity.io/macos-research/b/A78ADAF2-694B-4F6F-AB75-066A09E9CB6E/Malware-Knowledge-Base-Research-Skil

7 Jul 2026, 17:42 UTC≈1,910 viewsread 23 August 2026

https://www.linkedin.com/pulse/how-identify-attack-paths-active-directory-without-spencer-alessi-jer8c?utm_source=share&utm_medium=member_ios&utm_campaign=share_via

6 Jul 2026, 05:42 UTC≈1,600 viewsread 23 August 2026

https://medium.com/@itsmayank227/anatomy-of-a-good-detection-rule-52942aa0141d

4 Jul 2026, 18:48 UTC≈1,540 viewsread 23 August 2026

https://www.linkedin.com/pulse/identify-shebang-files-via-threat-hunting-kql-queries-sergio-albea-svv9e?utm_source=share&utm_medium=member_ios&utm_campaign=share_via

2 Jul 2026, 21:49 UTC≈1,540 viewsread 23 August 2026

https://www.sans.org/blog/investigating-ai-tools-modern-linux-intrusions?utm_medium=Organic_Social&utm_source=LinkedIn&utm_content=FOR577&utm_campaign=DFIR_Blog&utm_rdetail=PMM&utm_goal=Community_Awareness&utm_type=Curriculum

Showing the 12 most recent of 20 posts we hold for @DFIRHunting. View and reaction counts are the latest single reading for each post, not a live figure, and a recent post is still accumulating both. A view count marked ≈ was rounded by Telegram before we ever saw it — t.me prints views in full below 1,000 and to three significant figures above, so ≈1,200,000 means somewhere between 1,150,000 and 1,249,999. Unmarked counts are exact. Text is reproduced from the public post preview and truncated for length.

Appears in Telegram’s recommendations for other channels

The reverse of the list above, and a different kind of signal. This does not require this channel to have ever been asked about directly — each row below is a channel we DID ask Telegram about, whose Telegram-generated list happened to include this one. A channel can appear here with an empty list above it, because being named by someone else’s query is independent of having been queried itself.

Blue Team | SOC | DFIR | Cloud Security
@BlueTeamOps · 28,222
Telegram ranks this channel #6 of 53 here — alongside 52 others — read 11 September 2026
All Security Engineering Courses
@AllSecurityEngineeringCourses · 19,275
Telegram ranks this channel #13 of 37 here — alongside 36 others — read 3 October 2026
Cyber Threat Intelligence
@ctinow · 39,717
Telegram ranks this channel #13 of 42 here — alongside 41 others — read 31 August 2026
Pentesting with Kali Linux
@PentestingConKaliLinux · 23,882
Telegram ranks this channel #15 of 25 here — alongside 24 others — read 17 September 2026
🔗 Join in RedBlueTM 🎩
@RedBlueTM · 21,467
Telegram ranks this channel #17 of 36 here — alongside 35 others — read 23 September 2026
Cyber Guardians
@IRCyberGuardians · 20,664
Telegram ranks this channel #18 of 53 here — alongside 52 others — read 30 September 2026
OSCP+ Exam Resources👩‍💻
@noobtooscp · 23,402
Telegram ranks this channel #19 of 41 here — alongside 40 others — read 19 September 2026
Network Learning
@learningnets · 30,919
Telegram ranks this channel #19 of 56 here — alongside 55 others — read 7 September 2026
Cloud and Cybersecurity
@cloudandcybersecurity · 21,762
Telegram ranks this channel #25 of 62 here — alongside 61 others — read 22 September 2026
🛡 Cybersecurity & Privacy 🛡 - News
@cibsecurity · 28,877
Telegram ranks this channel #27 of 58 here — alongside 57 others — read 10 September 2026
Cyber Security News
@Cyber_Security_Channel · 57,038
Telegram ranks this channel #27 of 71 here — alongside 70 others — read 23 August 2026
Pentesting News
@PentestingNews · 27,698
Telegram ranks this channel #29 of 46 here — alongside 45 others — read 12 September 2026
Cyber Security Jobs
@CyberSecurityJobs · 18,780
Telegram ranks this channel #33 of 47 here — alongside 46 others — read 5 October 2026

This channel appears in 13 seed channels' Telegram-generated recommendation lists in total. Each is Telegram’s list for THAT channel, not this one — see how this is measured.

Cite this entry

A live page changes as we take new readings, so a citation should name the measurement it is based on, not just the URL. The line below cites the subscriber count as measured 27 October 2026 — this entry's latest reading, not the date you are reading this.

“Threat Hunting & DFIR” (@DFIRHunting), 6,866 subscribers as measured 27 October 2026. Telegram Register, tgregister.com/channel/DFIRHunting.

Full measurement history, CC BY 4.0. Every reading this register holds for this entry, not just the latest one, as a dated, downloadable record: CSV · JSON. Free to use with attribution to tgregister.com. Each file carries its own generation timestamp, which is the figure to cite for exactly when the data was retrieved.