Expand 39 api-reference stubs with real tool docs, expand 15 agent.py boilerplate stubs

2026-07-17 21:19:40 +03:00 · 2026-03-19 13:29:33 +01:00
parent d63b578a2f
commit d005ae764b
191 changed files with 4300 additions and 587 deletions
@@ -18,6 +18,14 @@ license: Apache-2.0

 The Diamond Model of Intrusion Analysis provides a structured framework for analyzing cyber intrusions by examining four core features: Adversary, Capability, Infrastructure, and Victim. This skill covers implementing the Diamond Model programmatically to classify and correlate intrusion events, build activity threads linking related events, create activity-attack graphs, and generate pivot-ready intelligence from intrusion data.

+
+## When to Use
+
+- When deploying or configuring implementing diamond model analysis capabilities in your environment
+- When establishing security controls aligned to compliance requirements
+- When building or improving security architecture for this domain
+- When conducting security assessments that require this implementation
+
 ## Prerequisites

 - Python 3.9+ with `networkx`, `stix2`, `graphviz` libraries