Recomendação
Resumo da publicação · inglês
Xiao Tan (tvytlx) recommends yara-l-authoring: an Agent Skill for Google SecOps/Chronicle YARA-L detection rules—turns threat notes, ATT&CK techniques, or Sigma/SPL/KQL into reviewable rules with VERIFY field markers, positive/negative tests, and false-positive tuning so the agent doubts itself before go-live.
