attack-chain-outliner

Features and purpose

Expert attack chain documentation for cybersecurity analysis. Create structured threat reports following standardized formats, map techniques to MITRE ATT&CK, generate detection logic and pseudocode queries, and produce professional security documentation. Use when creating attack chain documentation, documenting adversary techniques (persistence, lateral movement, credential access, etc.), writing detection rules, mapping to MITRE ATT&CK framework, analyzing malware or APT TTPs, creating threat intelligence reports, or building detection engineering content. Supports both Typst and Markdown output formats.

Quick start

Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.