detection-test-engineer

What problem does it solve?

This Skill automates the creation and execution of test scenarios to validate the effectiveness of security detections, ensuring they accurately trigger on malicious activity.

Core Features & Use Cases

• Test Scenario Generation: Creates comprehensive tests using Atomic Red Team, custom scripts, or direct simulation.
• SIEM Platform Agnostic: Works across Splunk, Sentinel, Elastic, and Sigma platforms.
• Use Case: You've just written a new detection rule for a MITRE ATT&CK technique. Use this Skill to generate a test case, execute it in your lab environment, and confirm the detection fires correctly.

Quick Start

Use the detection-test-engineer skill to create a test scenario for the T1003.001 technique.