/detection-engineering-coverage-evaluation
用 MCP 工具自動化 Google SecOps 的偵測工程流程：擷取威脅情資、產生威脅偵測機會（TDO）、用合成 UDM 事件模擬攻擊、評估規則涵蓋率並部署補缺規則。
- 安裝次數
- 6800
- 專案星數
- 2.2 萬 ★
- 授權
- Apache-2.0
- 專案更新
- 2026-11-02
怎麼裝
npx skills add https://github.com/google/skills --skill detection-engineering-coverage-evaluation安裝前請先看過原文內容。中文說明是 AI 翻譯，不保證安全。
原文
Automates the end-to-end detection engineering workflow in Google SecOps using MCP tools. Use when fetching threat intelligence from blogs, generating Threat Detection Opportunities (TDOs), simulating attacker behavior with synthetic UDM events, evaluating rule coverage, and deploying gap-closing rules. Don't use for standalone YARA-L 2.0 rule authoring/tuning (use secops-detection-engineering), threat hunting, or SOC investigation.