telemetry-signal-quality

What problem does it solve?

This Skill ensures that security detections and investigations are based on accurate, complete, and high-fidelity telemetry data, preventing false negatives due to data pipeline issues.

Core Features & Use Cases

• Telemetry Normalization: Standardizes diverse security event logs into a controlled vocabulary of event types and severity levels.
• Signal Quality Assessment: Assigns confidence scores to telemetry based on source credibility and signal specificity.
• Deduplication: Identifies and flags duplicate events to prevent alert fatigue and ensure data integrity.
• Use Case: When a new security alert fires, this Skill first validates that the underlying logs from the source (e.g., EDR, firewall) are healthy and correctly formatted before the alert is acted upon.

Quick Start

Normalize the provided raw security log data into a structured SecurityFact object.