Menu
Cross-phase audit of all outstanding Evidence Review and findings validation items
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Baseado na classificação ocupacional SOC
Show available THRUNT threat hunting commands and artifact layout
Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots
Initialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion
Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories
Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs
Publish a hunt as a case report, escalation, detection promotion, or leadership summary
| name | thrunt-audit-evidence |
| description | Cross-phase audit of all outstanding Evidence Review and findings validation items |
| allowed-tools | Read, Glob, Grep, Bash |
<execution_context> @.github/thrunt-god/workflows/audit-evidence.md </execution_context>
Core planning files are loaded in-workflow via CLI.Scope: Glob: .planning/phases//-EVIDENCE_REVIEW.md Glob: .planning/phases//-FINDINGS.md
