martinholovsky/sota-skills · skills/sota-detection-engineering/SKILL.md
sota-detection-engineering skillA
State-of-the-art detection engineering, SOC, threat hunting, and incident response (2026). Use when BUILDING detective controls or SOC capability — Sigma/YARA/Falco/Tetragon/Suricata rules, detection-as-code, MITRE ATT&CK coverage, SIEM detections, alert triage and SOAR, threat hunts, threat-intel, deception, IR playbooks, or adversary emulation — AND when AUDITING detection & IR posture (can we detect this? does this alert fire?). Owns DETECTIVE controls, SOC workflow, hunting, and IR (sota-obs
Latest version
mdr add martinholovsky/sota-skills/sota-detection-engineering@git:20260704.67df0ccExact content
mdr add martinholovsky/sota-skills/sota-detection-engineering@sha256:56e79fca4bb144ebBadge
[](https://markdownregistry.com/a/art_cm7cs2mvnmhqkxu4)
0 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260704.67df0cc latest | 2026-07-04 | 67df0cc | 10,902 B | A | view · diff |
| git:20260629.bacf523 | 2026-06-29 | bacf523 | 10,363 B | A | view · diff |
| git:20260617.c5d2c7b | 2026-06-17 | c5d2c7b | 10,721 B | A | view |
Audit of the latest version
A 17 of 17 checks passed. Deterministic, no model, same answer every run.
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (10902 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
martinholovsky/sota-skills · 18 stars · license CC-BY-4.0 · pushed 2026-09-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_cm7cs2mvnmhqkxu4 GET https://markdownregistry.com/api/v1/resolve?ref=martinholovsky/sota-skills/sota-detection-engineering GET https://markdownregistry.com/api/v1/blob/56e79fca4bb144eb11d02963e7363d7396355b8b9d9780c46507d4524e05fa19