{"slug":"mhaggis-cti-detection-engineer","source_name":"mhaggis/cti-detection-engineer","name":"Mhaggis/Cti Detection Engineer","description":"Expert CTI analyst specializing in detection engineering, MITRE ATT&CK mapping, behavioral analysis, and intelligence-driven detection creation. SIEM-agnostic methodology that works with Splunk SPL, KQL, Sigma, and Elastic. Use when analyzing threat reports, creating detections, mapping MITRE techniques, or developing behavioral analytics.","version":1,"lift":{"pass_rate_delta_pts":52.17,"pass_rate_pct":65.2,"total_cases":23,"passed_cases":15,"tokens_delta_pct":25.8,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-19T04:45:11.023563+00:00"},"skill_score":null,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":52.17,"with_pass_pct":65.2,"without_pass_pct":13,"tokens_delta_pct":25.8,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":23,"verdict":"mixed","never_hurt":false,"completed_at":"2026-08-19T04:45:11.023563+00:00","run_id":"69c7d217-5aa6-471b-b750-14b92d47b9ad","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":null,"install_count":0,"manifest_hash":"4543c72e0ac8fa86abb43a801ef81bde8b55aa74de7f4b99131784cfb5d2feb8","raw_url":"https://app.decimal.ai/s/mhaggis-cti-detection-engineer/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/mhaggis-cti-detection-engineer"}