[[ fm.text ]]
Click here
Loading…
Latest analysis
[[ scriptLabel(latest) ]]
Private
Outdated
I read the rule's content, tags, and ATT&CK mapping using
[[ latest.model || 'unknown model' ]], then wrote up what I found in plain English below."Here's what I found."
Model
[[ latest.model || 'not recorded' ]]Analysis[[ scriptLabel(latest) ]]
Written[[ fmtDate(prov(latest).created_at || latest.created_at) ]]
Requested by[[ who(prov(latest), 'requested_by', 'direct run, no request') ]]
Approved by[[ who(prov(latest), 'approved_by', 'no approval needed') ]]
Started by[[ who(prov(latest), 'initiated_by', '—') ]]
Rule version analysed
[[ prov(latest).content_hash.slice(0, 12) ]]not recorded
· [[ prov(latest).outdated ? 'older than the current rule' : 'the current rule' ]]What the AI was given — and what it did not check
Given to the model
- [[ x ]]
[[ latest.meta.headline ]]
[[ latest.meta.severity ]] severity
[[ latest.meta.confidence ]] confidence
[[ c.id ]] · CVSS [[ c.cvss ]] · EPSS [[ c.epss_pct ]]%
Recommendations
- [[ r ]]
MITRE ATT&CK Relevance
[[ m.technique ]]
False Positive Risks
- [[ f ]]
Evasion Techniques
- [[ e ]]
I read the rule's content, tags, and ATT&CK mapping, then write up what I find in plain English — an admin just has to ask me to.
"I haven't had a chance to look at this one yet."
History ([[ history.length ]])
[[ scriptLabel(entry) ]]
[[ entry.is_public ? 'Public' : 'Private' ]]
[[ entry.model || 'unknown model' ]]
[[ fmtDate(prov(entry).created_at || entry.created_at) ]]
· rev. [[ prov(entry).content_hash.slice(0, 12) ]]
Outdated