Generate query-agnostic analytics that model adversary behavior by translating hunt investigative intent into analytic definitions grounded in schema semantics. This skill is used to define how behavior should manifest in data before query execution or validation, and works best when informed by system internals, adversary tradecraft, a structured hunt focus, and suggested data sources.
安装
npx skills add OTRF/ThreatHunter-Playbook --skill hunt-analytics-generationnpx skills add OTRF/ThreatHunter-Playbook --skill hunt-analytics-generation -a claude-code -gnpx skills add OTRF/ThreatHunter-Playbook --skill hunt-analytics-generation -a codex -ggemini skills install https://github.com/OTRF/ThreatHunter-Playbook.git --path .github/skills/hunt-analytics-generationgh skill install OTRF/ThreatHunter-Playbook hunt-analytics-generationgit clone --depth 1 https://github.com/OTRF/ThreatHunter-Playbook /tmp/OTRF__ThreatHunter-Playbook
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/OTRF__ThreatHunter-Playbook/.github/skills/hunt-analytics-generation ~/.claude/skills/hunt-analytics-generation # Claude Code
cp -R /tmp/OTRF__ThreatHunter-Playbook/.github/skills/hunt-analytics-generation ~/.agents/skills/hunt-analytics-generation # Codex, Cursor, Gemini CLI, Copilot, OpenCode