detection-engineering-coverage-evaluation

【部署与运维】Automates the end-to-end detection engineering workflow in Google SecOps using MCP tools. Use when fetching threat intelligence from blogs, generating Threat Detection Opportunities (TDOs), simulating attacker behavior with synthetic UDM events, evaluating rule coverage, and deploying gap-closing rules. Don't use for standalone YARA-L 2.0 rule author…

独立 GitHub 快照 · 自动分类 · 以原作者文档为准