TracecatHQ/tracecat

Turns a threat report, a malware analysis, vendor tool documentation, or a raw log sample into draft Sigma detection rules, validated against sigma-cli where a shell exists and labelled "not…

TracecatHQ/tracecat

Turns a vague, high-level stakeholder ask into a structured set of intelligence requirements for a CTI team, complete with Essential Elements of Information, collection guidance, success criteria…

TracecatHQ/tracecat

A skill your agent uses when adding or updating documentation pages in an existing docs site.

TracecatHQ/tracecat

Rates a threat against the OWASP Risk Rating Methodology, then rates it again counting only the mitigations that are implemented and verified, and again counting dated commitments, and shows the…

TracecatHQ/tracecat

Cut a stable GitHub release or prerelease directly from a Tracecat release branch, including the version bump, tag, image verification, and categorized release notes.

TracecatHQ/tracecat

Create, retitle, or label a pull request for the current branch.

TracecatHQ/tracecat

Investigate AWS credential compromise, STS session abuse, and API breaches; produce an evidence-backed timeline, containment plan, and incident handoff.

TracecatHQ/tracecat

QA Tracecat product features in a real local cluster. An agent skill from TracecatHQ/tracecat.

TracecatHQ/tracecat