{
  "id": "threat-detection",
  "name": "threat-detection",
  "description": "Use when hunting for threats in an environment, analyzing IOCs, or detecting behavioral anomalies in telemetry. Covers hypothesis-driven threat hunting, IOC sweep generation, z-score anomaly detection, and MITRE ATT&CK-mapped signal prioritization.",
  "version": "1.0.0",
  "author": "alirezarezvani",
  "tags": [
    "engineering"
  ],
  "entryPoint": "tool_chain",
  "category": "engineering",
  "toolChain": [],
  "inputs": [],
  "outputs": [
    {
      "name": "result",
      "type": "string",
      "description": "Skill output"
    }
  ],
  "createdAt": "2026-04-27T00:40:32.546740Z",
  "updatedAt": "2026-04-27T00:40:32.546740Z"
}