threat-detection

原文涵盖的主题

• Threat Detection
• Table of Contents
• Overview
• What This Skill Does
• Distinction from Other Security Skills
• Prerequisites
• Threat Signal Analyzer
• IOC file format

Threat detection skill for proactive discovery of attacker activity through hypothesis-driven hunting, IOC analysis, and behavioral anomaly detection. This is NOT incident response (see incident-response) or red team operations (see red-team) — this is about finding threats that have evaded automated controls. -- Overview Threat Signal Analyzer Threat Hunting Methodology IOC Analysis Anomaly Detection MITRE ATT&CK Signal Prioritization Deception and Honeypot Integration Workflows Anti-Patterns Cross-References -- This skill provides the methodology and tooling for proactive threat detection — finding attacker activity through structured hunting hypotheses, IOC analysis, and statistical anomaly detection before alerts fire. | Skill | Focus | Approach | |-------|-------|----------| | threat-detection (this) | Finding hidden threats | Proactive — hunt before alerts | | incident-response | Active incidents | Reactive — contain and investigate declared incidents | | red-team | Offensive simulation | Offensive — test defenses from attacker perspective | | cloud-security | Cloud misconfigurations | Posture — IAM, S3, network exposure | Read access to SIEM/EDR telemetry, endpoint logs, and

这里只展示节选，请以完整原文和当前要求为准。