agy_plugin_secops

Expert guidance for proactive threat hunting. Use this when the user asks to "hunt" for threads, IOCs, or specific TTPs.

Expert guidance for deep security investigations. Use this when the user asks to "investigate" a case, entity, or incident.

Analyzes security events and drafts target rules.

Expert guidance for security alert triage. Use this when the user asks to "triage" an alert or case.