Software Development

Detection Engineering Coverage Evaluation

The skill automates the entire detection engineering workflow in Google SecOps, from fetching threat intelligence to generating Threat Detection Opportunities, simulating attacker behavior with synthetic UDM events, evaluating rule coverage, and deploying gap‑closing rules. It enables security teams to streamline coverage assessment and rule deployment, ensuring comprehensive protection against emerging threats. The skill is not intended for standalone YARA‑L 2.0 rule authoring, threat hunting, or SOC investigation.

Publisher / source
Google Skills (Verified)
Upstream record
google/skills
Version
Version 7
Published
Publication review
Approved for publication
Content fingerprint
1fef812b19e8cb0a1b8ed6c2c47f062a41ce56855bef6aba59e1d838aaf736e8