Detection Query Optimizer

We split this skill into the rules it gives an agent

20 rules. About 0 are common, 7 are distinctive, and 13 are very specific to this project.

• ≈0

  Common · estimate

  Many files like this have a rule of this kind.

• ≈7

  Distinctive · estimate

  This author's own choices. Worth a look.

• 13

  Very specific

  Tied to their project's names, files or tools. Probably skip.

No licence file, so all rights are reserved — read it at the source. We count its rules but don't quote them. Read them on GitHub.

≈ “Common” is an estimate: at least 1 in 5 of the 308,232 skill files we read have a rule of the same kind, not the same words. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.

• In this repository20 other files it gives its agents.

  • .cursor/rules/contentctl-path.mdcCursor rule
  • .cursor/rules/detection-validation.mdcCursor rule
  • .cursor/rules/linux-testing-workflow.mdcCursor rule
  • .cursor/rules/pip-install.mdcCursor rule
  • .cursor/rules/self-healing.mdcCursor rule
  • .cursor/rules/validation-tools.mdcCursor rule
  • Analytic Story BuilderSkill
  • Atomic Red Team TestingSkill
  • ATT&CK Navigator Layer GeneratorSkill
  • Test Environment BuilderSkill
  • detection-coverage-analysisSkill
  • cti-detection-engineerSkill
  • Custom Atomics DeploymentSkill
  • Data Source MapperSkill
  • detection-reviewerSkill
  • detection-test-engineerSkill
  • detection-yaml-engineerSkill
  • PR Extension WorkflowSkill
  • Supply Chain Attack AnalystSkill
  • threat-report-parserSkill