Author, validate, test, and deploy YARA-L 2.0 detection rules and evaluate end-to-end detection coverage gaps in Google SecOps. Use when writing new detection rules, tuning existing rules, validating syntax, testing logic against historical telemetry, or evaluating detection coverage against threat intelligence blogs, CVE disclosures, and Threat Detection Opportunities (TDOs) using synthetic UDM…
Install
npx skills add google/skills --skill secops-detection-engineeringnpx skills add google/skills --skill secops-detection-engineering -a claude-code -gnpx skills add google/skills --skill secops-detection-engineering -a codex -ggemini skills install https://github.com/google/skills.git --path skills/cloud/secops-detection-engineeringgh skill install google/skills secops-detection-engineeringgit clone --depth 1 https://github.com/google/skills /tmp/google__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/google__skills/skills/cloud/secops-detection-engineering ~/.claude/skills/secops-detection-engineering # Claude Code
cp -R /tmp/google__skills/skills/cloud/secops-detection-engineering ~/.agents/skills/secops-detection-engineering # Codex, Cursor, Gemini CLI, Copilot, OpenCode