This repository has been archived on 2026-06-11. You can view files and clone it, but cannot push or open issues or pull requests.
Diablo_ClaudeMD_Ricing_example/skills/threat-hunting/examples/example_usage.md
diablo 50fa79407d
Some checks are pending
CI — CoM Config Validation / Validate JSON Configs (push) Waiting to run
CI — CoM Config Validation / Validate YAML Configs (push) Waiting to run
CI — CoM Config Validation / Lint Shell Scripts (push) Waiting to run
CI — CoM Config Validation / Secret Detection (push) Waiting to run
CI — CoM Config Validation / Lint Markdown (push) Waiting to run
CI — CoM Config Validation / Validate CODEOWNERS (push) Waiting to run
CoM Claude Command Center — sanitized public configuration
Public, sanitized mirror of an AI orchestration command center: agents, skills,
MCP servers, slash-command workflows. All infrastructure identifiers, hostnames,
mesh IPs/subnets, repo paths, maintainer identity, and hardware fleet specifics
scrubbed to <placeholders>; session debug logs and host-specific memory removed.
No live credentials. Verified clean by automated leak sweep. See SANITIZATION.md.

churchofmalware.org . authorized research only
2026-06-10 02:02:03 -04:00

523 B

Threat Hunting — Example Usage

IOC Extraction

python scripts/ioc_extractor.py -i threat_report.txt -o iocs.json
python scripts/ioc_extractor.py -i report.txt --defang -f csv -o iocs.csv
python scripts/ioc_extractor.py -i report.txt -f stix -o iocs_stix.json

MITRE ATT&CK Mapping

python scripts/mitre_mapper.py -t T1059.001 -o technique.json
python scripts/mitre_mapper.py -i techniques.txt --navigator -o layer.json
python scripts/mitre_mapper.py -t T1110.001 --detection-query splunk