/secops-detection-engineering
在 Google SecOps 撰寫、驗證、測試並部署 YARA-L 2.0 偵測規則，並評估端到端偵測覆蓋缺口。用於寫新規則、調整既有規則、驗證語法，以及用歷史遙測測試邏輯。
- 安裝次數
- 2300
- 專案星數
- 2.2 萬 ★
- 授權
- Apache-2.0
- 專案更新
- 2026-11-02
怎麼裝
npx skills add https://github.com/google/skills --skill secops-detection-engineering安裝前請先看過原文內容。中文說明是 AI 翻譯，不保證安全。
原文
Author, validate, test, and deploy YARA-L 2.0 detection rules and evaluate end-to-end detection coverage gaps in Google SecOps. Use when writing new detection rules, tuning existing rules, validating syntax, testing logic against historical telemetry, or evaluating detection coverage against threat intelligence blogs, CVE disclosures, and Threat Detection Opportunities (TDOs) using synthetic UDM events and long-running coverage analysis. Don't use for alert triage (use secops-triage), deep forensic event reconstruction on infected hosts (use secops-investigate), or case management operations (use secops-cases).