菜单
Identifies indicators of compromise, anomalous network/endpoint behavior, and active intrusion patterns from the provided data.
默认使用会先检查来源的 Prompt；你也可以切换为直接命令，或下载本地副本。
决定是否安装前，请先阅读 SKILL.md，以及 SkillsMP 当前展示的配套文件。
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
直接命令不会经过审查 Prompt；运行前请先检查来源。
npx skills add https://github.com/ahmadvh/octochains --skill threat-intel-triage命令会保持在同一行。复制前请横向滚动并检查完整内容。
想先保存到本地？可下载 SkillsMP 当前能够提供的文件。
正在显示 SKILL.md
Analyzes authentication and authorization events for failed-login clustering, privilege-escalation chains, credential-stuffing patterns, and MFA-bypass indicators.
Determines whether a security incident involves personal data, triggers regulatory breach-notification obligations (e.g. GDPR Art. 33/34), and what notification timelines apply.
Detects anomalous behavior by authenticated users that may indicate insider threats through behavioral analysis of access patterns, privileged actions, and data movement.
基于 SOC 职业分类
| name | threat-intel-triage |
| description | Identifies indicators of compromise, anomalous network/endpoint behavior, and active intrusion patterns from the provided data. |
| version | 1.0.0 |
Analyze security logs to identify suspicious activity and potential cyber attacks.
Overall Threat Level: [LOW | MEDIUM | HIGH | CRITICAL]
Priority Findings:
Indicators of Compromise:
MITRE ATT&CK Mapping:
Recommended Next Steps:
