add_learning
Capture analysis insights and lessons learned with topic, source, tags, and confidence for reuse in detection engineering.
Instructions
Add a learning or insight gained during analysis
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tags | No | Tags for categorization | |
| topic | Yes | Topic area (e.g., "ransomware", "powershell", "lateral movement") | |
| source | No | Source of the learning | |
| insight | Yes | The insight or learning | |
| confidence | No | Confidence in this learning 0-1 |