/secops-investigate
Google SecOps 深入調查資安事件與實體的專家指引。用於調查 case、分析實體（主機、IP、網域、hash、使用者）、擷取並搜尋 UDM 事件，以及偵測橫向移動。
- 安裝次數
- 2300
- 專案星數
- 2.2 萬 ★
- 授權
- Apache-2.0
- 專案更新
- 2026-11-02
怎麼裝
npx skills add https://github.com/google/skills --skill secops-investigate安裝前請先看過原文內容。中文說明是 AI 翻譯，不保證安全。
原文
Expert guidance for deep security incident and entity investigations in Google SecOps. Use when investigating cases, analyzing entities (hosts, IPs, domains, hashes, users), extracting and searching UDM events, performing asset and user timeline analysis, and detecting lateral movement across enterprise networks. Don't use for detection rule authoring or YARA-L tuning (use secops-detection-engineering), proactive hypothesis-driven hunting (use secops-hunt), initial alert triage (use secops-triage), or basic case status updates (use secops-cases).