Expert guidance for proactive threat hunting in Google SecOps. Use when proactively hunting for threats, retroactively analyzing indicators of compromise (IoCs), performing prevalence searches across enterprise events, hunting for MITRE ATT&CK techniques, or detecting behavioral and statistical outliers using UDM queries.
Install
npx skills add google/skills --skill secops-huntnpx skills add google/skills --skill secops-hunt -a claude-code -gnpx skills add google/skills --skill secops-hunt -a codex -ggemini skills install https://github.com/google/skills.git --path skills/cloud/secops-huntgh skill install google/skills secops-huntgit clone --depth 1 https://github.com/google/skills /tmp/google__skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/google__skills/skills/cloud/secops-hunt ~/.claude/skills/secops-hunt # Claude Code
cp -R /tmp/google__skills/skills/cloud/secops-hunt ~/.agents/skills/secops-hunt # Codex, Cursor, Gemini CLI, Copilot, OpenCode