SecOps Detection Coverage Skill

Automates the end-to-end detection engineering workflow in Google SecOps using MCP tools. Use when fetching threat intelligence from blogs, generating Threat Detection Opportunities (TDOs), simulating attacker behavior with synthetic UDM events, evaluating rule coverage, and generating new YARA-L 2.

Source: github.com/google/skills/tree/HEAD/skills/cloud/detection-engineering-coverage-evaluation · License: Apache-2.0