<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Agentic Security Field Guide: Detection engineering</title><description>Tools for the task: Detection engineering, with reach and lab verdict.</description><link>https://readbeforerun.ai/</link><item><title>Google Security Operations MCP Server (reach 3 · not run yet)</title><link>https://readbeforerun.ai/catalog/google-secops-mcp/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/google-secops-mcp/</guid><description>MCP server for Google Security Operations (Chronicle) with 68 tools for event search, alerts, detection rules, log ingestion and SIEM configuration.</description><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate></item><item><title>SentinelOne MCP Server (s1-secops-mcp) (reach ≥2 · not run yet)</title><link>https://readbeforerun.ai/catalog/sentinelone-s1-secops-mcp/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/sentinelone-s1-secops-mcp/</guid><description>Node.js MCP server with 35 tools for the SentinelOne console, data lake, alert management and Hyperautomation, read-only by default.</description><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate></item><item><title>SentinelOne AI Analyst: Claude Skills (reach 3 · not run yet)</title><link>https://readbeforerun.ai/catalog/sentinelone-s1-secops-skills/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/sentinelone-s1-secops-skills/</guid><description>Claude plugin with eight SentinelOne skills for threat hunting, alert triage, detections, dashboards, parsers and Hyperautomation workflows.</description><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate></item><item><title>Malware Analyst (reach ≥2 · not run yet)</title><link>https://readbeforerun.ai/catalog/tomabai-malware-analyst/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/tomabai-malware-analyst/</guid><description>Agent skill that walks through a static malware analysis: deobfuscation, IOC extraction and detection signatures.</description><pubDate>Wed, 21 Oct 2026 00:00:00 GMT</pubDate></item><item><title>[demo] Example SIEM Query (reach ≥1 · not run yet)</title><link>https://readbeforerun.ai/catalog/example-siem-query/</link><guid isPermaLink="true">https://readbeforerun.ai/catalog/example-siem-query/</guid><description>Builds and explains SIEM queries for alert triage from a short description of the alert.</description><pubDate>Mon, 12 Oct 2026 00:00:00 GMT</pubDate></item></channel></rss>