ttp-extractor

What problem does it solve?

This skill helps security teams automatically extract attack techniques, defensive gaps, and MITRE ATT&CK mappings from security reports and threat intelligence, enabling faster threat understanding and response.

Core Features & Use Cases

• TTP extraction from reports and intel, with ATT&CK mapping
• Sigma rule generation for detections and alerting
• Threat hunting queries and defensive recommendations for SOC workflows
• Use Case: When provided with a security report, produce ATT&CK-aligned techniques, detection rules, and hunting queries for incident response.

Quick Start

Analyze a security report to extract ATT&CK techniques and generate Sigma rules for detections.