ioc-enrichment-skill

A foundational skill for extracting, contextualizing, and evaluating an Indicator of Compromise (IOC) against internal and external threat intelligence.

Exécuter dans Manus

Aperçu

A foundational skill for extracting, contextualizing, and evaluating an Indicator of Compromise (IOC) against internal and external threat intelligence.

Commande d'installation

npx skills add https://github.com/dandye/agentic_soc_gemini_enterprise --skill ioc-enrichment-skill

Copiez et collez cette commande dans Claude Code pour installer le skill

Source

dandye/agentic_soc_gemini_enterprise

Étoiles12

Forks8

Mis à jour22 mai 2026 à 15:26

Explorateur de fichiers

2 fichiers

SKILL.md

readonly

name	ioc-enrichment-skill
description	A foundational skill for extracting, contextualizing, and evaluating an Indicator of Compromise (IOC) against internal and external threat intelligence.

IOC Enrichment Implementation

You are equipped with a foundational IOC enrichment runbook. Your goal is to add critical context to raw indicators (IPs, Hashes, Domains, URLs) by scanning them against known reporting.

Instructions:

Refer to the references/basic_ioc_enrichment.md file to understand the standard IOC enrichment queries.
Look up the IOC in Chronicle SIEM for internal sightings.
Determine the final confidence score of the IOC and provide a formalized summary report back to the Orchestrator regarding the indicator's prevalence.

Plus depuis ce dépôt

même dépôt

chatops-skill

dandye/agentic_soc_gemini_enterprise

Enables the agent to communicate with human security analysts for notifications and high-stakes confirmations (Human-in-the-loop).

2026-05-2212

malware-triage-skill

dandye/agentic_soc_gemini_enterprise

A comprehensive skill that provides logic, instructions, and workflows for properly identifying, analyzing, and containing malware samples discovered in the environment.

2026-05-2212

Source

dandye

dandye/agentic_soc_gemini_enterprise

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Commande d'installation

Téléchargement

Exécuter dans Manus

Utile pourSOC

Analystes en sécurité de l'informationProfessions informatiques et mathématiques15-1212L4

name	ioc-enrichment-skill
description	A foundational skill for extracting, contextualizing, and evaluating an Indicator of Compromise (IOC) against internal and external threat intelligence.

IOC Enrichment Implementation

You are equipped with a foundational IOC enrichment runbook. Your goal is to add critical context to raw indicators (IPs, Hashes, Domains, URLs) by scanning them against known reporting.

Instructions:

Refer to the references/basic_ioc_enrichment.md file to understand the standard IOC enrichment queries.
Look up the IOC in Chronicle SIEM for internal sightings.
Determine the final confidence score of the IOC and provide a formalized summary report back to the Orchestrator regarding the indicator's prevalence.