Menu
Insert urgent work as decimal phase (e.g., 72.1) between existing phases
Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.
Basé sur la classification professionnelle SOC
Show available THRUNT threat hunting commands and artifact layout
Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots
Initialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion
Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories
Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs
Publish a hunt as a case report, escalation, detection promotion, or leadership summary
| name | thrunt-insert-phase |
| description | Insert urgent work as decimal phase (e.g., 72.1) between existing phases |
| argument-hint | <after> <description> |
| allowed-tools | Read, Write, Bash |
Uses decimal numbering (72.1, 72.2, etc.) to preserve the logical sequence of planned phases while accommodating urgent insertions.
Purpose: Handle urgent work discovered during execution without renumbering entire huntmap.
<execution_context> @.github/thrunt-god/workflows/insert-phase.md </execution_context>
Arguments: $ARGUMENTS (format: )Huntmap and state are resolved in-workflow via init phase-op and targeted tool calls.
