Menú
Initialize a new YARA-L rule directory structure and YARA-L rule file from the template.
Instalar con Codex o Claude Copia este prompt, pégalo en Codex, Claude u otro asistente, y deja que revise la página de la skill y la instale por ti.
Basado en la clasificación ocupacional SOC
Author rule notes, parameters, dependencies, tuning, and testing sections for a YARA-L rule.
Extract unstructured legacy rules from a raw text file and structure them into valid JSON.
Take a source SIEM rule and format its content for readability, then insert it into a YARA-L rule template.
Generate a raw sample log entry in the original source format that will trigger the migrated YARA-L rule.
Migrate a source rule section in a YARA-L file into YARA-L 2.0, adhering to precise Google SecOps schemas.
Full orchestration workflow to migrate a custom SIEM rule to YARA-L, running all sub-steps sequentially.
| name | migration_helper_init |
| description | Initialize a new YARA-L rule directory structure and YARA-L rule file from the template. |
Initializes a new detection rule directory and .yaral rule template inside the workspace repository.
/migration_helper_init <rule_name> or requests initializing a rule directory.Your primary role is to create a new directory <rule_name> inside rules/ in the existing repository and initialize the <rule_name>.yaral file with the rule template.
├── rules
│ ├── <rule_name>
│ │ └── <rule_name>.yaral
│ └── sample_logs
rules/<rule_name>/<rule_name>.yaral with the contents of the rule template located at .agents/skills/migration_helper_init/references/rule_template.md. Make sure to replace all instances of {{args}} (e.g., in rule {{args}}) with the actual <rule_name>.