Blue-team threat hunting: detection engineering with Sigma/YARA, SIEM query design, and validation of incident detections against known technique patterns. (SKILL.md metadata excerpt)
Authorized OSINT and cyber threat intelligence: enriching IOCs, campaigns, impersonation, scams, and threat-actor profiles from public sources with defined boundaries. (SKILL.md metadata excerpt)
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness. (SKILL.md metadata excerpt)
Map identified threats to appropriate security controls and mitigations. Use when prioritizing security investments, creating remediation plans, or validating control effectiveness. (SKILL.md metadata excerpt)
Full STRIDE-A threat model analysis and incremental update skill for repositories and systems. Supports two modes: (1) Single (Publisher-index excerpt; file read separately)