hunt-data-source-identification

Features and purpose

Identify relevant security data sources that could capture the behavior defined in a structured hunt hypothesis. Use this skill after the hunt focus has been defined to translate investigative intent into candidate telemetry sources using existing platform catalogs. This skill supports hunt planning by reasoning over available schemas and metadata before analytics development or query execution.

Quick start

Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.