القائمة
Initialize a new YARA-L rule directory structure and YARA-L rule file from the template.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Author rule notes, parameters, dependencies, tuning, and testing sections for a YARA-L rule.
Extract unstructured legacy rules from a raw text file and structure them into valid JSON.
Take a source SIEM rule and format its content for readability, then insert it into a YARA-L rule template.
Generate a raw sample log entry in the original source format that will trigger the migrated YARA-L rule.
Migrate a source rule section in a YARA-L file into YARA-L 2.0, adhering to precise Google SecOps schemas.
Full orchestration workflow to migrate a custom SIEM rule to YARA-L, running all sub-steps sequentially.
| name | migration_helper_init |
| description | Initialize a new YARA-L rule directory structure and YARA-L rule file from the template. |
Initializes a new detection rule directory and .yaral rule template inside the workspace repository.
/migration_helper_init <rule_name> or requests initializing a rule directory.Your primary role is to create a new directory <rule_name> inside rules/ in the existing repository and initialize the <rule_name>.yaral file with the rule template.
├── rules
│ ├── <rule_name>
│ │ └── <rule_name>.yaral
│ └── sample_logs
rules/<rule_name>/<rule_name>.yaral with the contents of the rule template located at .agents/skills/migration_helper_init/references/rule_template.md. Make sure to replace all instances of {{args}} (e.g., in rule {{args}}) with the actual <rule_name>.