Menú
Add phase to end of current milestone in huntmap
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
| name | thrunt-add-phase |
| description | Add phase to end of current milestone in huntmap |
| argument-hint | <description> |
| allowed-tools | Read, Write, Bash |
Routes to the add-phase workflow which handles:
<execution_context> @.github/thrunt-god/workflows/add-phase.md </execution_context>
Arguments: $ARGUMENTS (phase description)Huntmap and state are resolved in-workflow via init phase-op and targeted tool calls.
The workflow handles all logic including:
Show available THRUNT threat hunting commands and artifact layout
Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots
Initialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion
Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories
Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs
Publish a hunt as a case report, escalation, detection promotion, or leadership summary
