{"slug":"performing-threat-hunting-with-elastic-siem","source_name":"performing-threat-hunting-with-elastic-siem","name":"Performing Threat Hunting With Elastic Siem","description":"Performs proactive threat hunting in Elastic Security SIEM using KQL/EQL queries, detection rules, and Timeline investigation to identify threats that evade automated detection. Use when SOC teams need to hunt for specific ATT&CK techniques, investigate anomalous behaviors, or validate detection coverage gaps using Elasticsearch and Kibana Security.","version":1,"lift":{"pass_rate_delta_pts":39.13,"pass_rate_pct":43.5,"total_cases":23,"passed_cases":10,"tokens_delta_pct":64.7,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-07-28T11:42:27.834411+00:00"},"skill_score":0.4348,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":39.13,"with_pass_pct":43.5,"without_pass_pct":4.3,"tokens_delta_pct":64.7,"turns_delta_pct":0,"total_cases":23,"cases_aggregated":23,"verdict":"mixed","never_hurt":true,"completed_at":"2026-07-28T11:42:27.834411+00:00","run_id":"968083d6-0fae-41a1-b2cf-dce87e177aa7","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"Apache-2.0","install_count":0,"manifest_hash":"7a99bffa3b80e9d8a9e41105706b80b14c32e4502cb5f26a6ff67b20681fc289","raw_url":"https://app.decimal.ai/s/performing-threat-hunting-with-elastic-siem/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/performing-threat-hunting-with-elastic-siem"}