菜单
Zero-friction idea capture. Append, list, or promote notes to todos.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Show available THRUNT threat hunting commands and artifact layout
Map available telemetry, query surfaces, tenants, retention windows, and investigation blind spots
Initialize a threat hunting case from a signal, detection, intel lead, or analyst suspicion
Initialize a threat hunting program with an environment map, tool inventory, huntmap, and empty execution directories
Create phase plans for a threat hunt with exact telemetry tasks, receipts, and query outputs
Publish a hunt as a case report, escalation, detection promotion, or leadership summary
基于 SOC 职业分类
| name | thrunt-note |
| description | Zero-friction idea capture. Append, list, or promote notes to todos. |
| argument-hint | <text> | list | promote <N> [--global] |
| allowed-tools | Read, Write, Glob, Grep |
Three subcommands:
Runs inline — no Task, no AskUserQuestion, no Bash.
<execution_context> @.github/thrunt-god/workflows/note.md @.github/thrunt-god/references/ui-brand.md </execution_context>
$ARGUMENTS Execute the note workflow from @.github/thrunt-god/workflows/note.md end-to-end. Capture the note, list notes, or promote to todo — depending on arguments.