update-threat-db

To update a threat intelligence database, you can ingest new CVEs and IOCs by providing a source URL. The skill analyzes recent research, deduplicates entries, and categorizes findings into structured threat intelligence data.

You can deduplicate and categorize malicious skills into a YAML file by integrating new threat intelligence data. The process categorizes findings into malicious_authors, malicious_skills, and malicious_skill_patterns while validating YAML syntax.

The best way to maintain an auditable change history for threat intelligence is to append new sources, bump the version, and update the date within your database. This preserves existing data and ensures data integrity for security reviews.

Yes, you can automate threat intelligence triage by invoking the skill with an optional source URL. It categorizes new findings into attack_techniques, campaigns, and defensive_resources while validating the YAML syntax automatically.

Updating a threat-db YAML file does not require external dependencies. The skill operates independently to validate YAML syntax, deduplicate entries, and bump the version without needing additional components or libraries.