- **Metadata defect:** `severity: high` is not valid Sigma severity metadata. Use `level: high`. `level` expresses impact/priority; `status` expresses lifecycle. - **Lifecycle:** `status: experimental` is valid, but does not prove execution or efficacy. - **Readiness:** **Blocked / not-tested** because required process telemetry is not collected. Do not claim analytic coverage or production readiness. - **Remediation:** Fix the key to `level: high`, document the telemetry prerequisite and lim...
Installs into .claude/skills of the current project.
Are you the author of Cyber Detection Engineering?
Add the live security badge to your README. It updates with every re-scan.
[](https://www.skillsdirectory.com/skills/hoangnguyen0403-cyber-detection-engineering)
- **Metadata defect:** `severity: high` is not valid Sigma severity metadata. Use `level: high`. `level` expresses impact/priority; `status` expresses lifecycle.
- **Lifecycle:** `status: experimental` is valid, but does not prove execution or efficacy.
- **Readiness:** **Blocked / not-tested** because required process telemetry is not collected. Do not claim analytic coverage or production readiness.
- **Remediation:** Fix the key to `level: high`, document the telemetry prerequisite and limitation, collect/verify the required process fields and collection path, then test with fixtures and benign cases before reassessing readiness.
