Tagged threat-hunting