tool-use-threat-intel-enrichment-agent
Build an agent that autonomously investigates IOCs by querying multiple threat intel sources, cross-referencing findings, mapping to MITRE ATT&CK, and producing structured reports for SIEM and SOAR integration.
- Score
- Unranked
- Evidence
- No signals yet
- Last commit
- Not known
- Listed
Install
armory install tool-use-threat-intel-enrichment-agent --cli claudewrites the file to.claude/commands/tool-use-threat-intel-enrichment-agent.mdListed as compatible
# fetches the source and writes it to:
.claude/commands/tool-use-threat-intel-enrichment-agent.mdNeeds the armory CLI · not on npm yet, build it from cli/ in the repository
What it is
Official anthropics/anthropic-cookbook workflows component — Build an agent that autonomously investigates IOCs by querying multiple threat intel sources, cross-referencing findings, mapping to MITRE ATT&CK, and producing structured reports for SIEM and SOAR integration.
When to use it
Build an agent that autonomously investigates IOCs by querying multiple threat intel sources, cross-referencing findings, mapping to MITRE ATT&CK, and producing structured reports for SIEM and SOAR integration.
How to install / invoke
Official Anthropic cookbook recipe (notebook). Open it to follow the runnable walkthrough: https://github.com/anthropics/anthropic-cookbook/blob/main/tool_use/threat_intel_enrichment_agent.ipynb
Notes
Recipe "Threat intelligence enrichment agent" from the anthropic-cookbook tool_use/ family (categories: Tools, Agent Patterns, Cybersecurity). License: MIT.