CodexPluginStats
← CrowdStrike Falcon FusionCONTENT HISTORY

Update to CrowdStrike Falcon Fusion

Snapshot Oct 8, 2026 · 18:03 UTC · version 1.3.0

WHAT CHANGED · RULE-BASED ANALYSIS

Package or technical metadata updated

Package contents changed in 33 files: .codex-plugin/assets/composer-icon.png, .codex-plugin/assets/logo.png, .codex-plugin/plugin.json, …. Open the file diff to inspect the edits.

Observed in package metadata. These changes alone do not establish a new customer-facing feature.

Package file

Before

{"sha256":"5132bd5af60a22182bd531e1e9e3f0f11784038b0ef2ef611459af7b80cb6ff9","size":10229}

After

Not present

Package file

Before

{"sha256":"5132bd5af60a22182bd531e1e9e3f0f11784038b0ef2ef611459af7b80cb6ff9","size":10229}

After

Not present

Package file

Before

9735ddc72550a40e603b8f3526ef6666d4509cd6691405f0adf6a6536f71aed5

After

b5c2ba0be10a2d3d67fa3d9733181f6c894f6cf10c2ccabde61afc7df3b7dea1

Package file

Before

1612

After

1567

Compare saved observations

Download comparison JSON

Changed files

.codex-plugin/assets/composer-icon.png →

.codex-plugin/assets/logo.png →

.codex-plugin/plugin.json →

README.md →

scripts/agy-plugin-swap.sh →

scripts/cleanup_workflows.py →

skills/authoring/SKILL.md →

skills/authoring/references/cel-expressions.md →

skills/authoring/references/charlotte-ai-action.md →

skills/authoring/references/event-query-action.md →

skills/authoring/references/inline-python-action.md →

skills/authoring/references/json-structure.md →

skills/authoring/references/trigger-types.md →

skills/authoring/references/yaml-schema.md →

skills/authoring/scripts/trigger_search.py →

skills/authoring/scripts/validate.py →

skills/deployment/SKILL.md →

skills/deployment/references/console-verification.md →

skills/execution/SKILL.md →

skills/foundry-redirect/SKILL.md →

skills/lookup-files/SKILL.md →

skills/lookup-files/references/lookup-file-formats.md →

skills/setup/SKILL.md →

skills/workflows/SKILL.md →

skills/workflows/references/best-practices.md →

skills/workflows/references/cel-expressions.md →

skills/workflows/references/json-structure.md →

skills/workflows/references/trigger-types.md →

skills/workflows/references/yaml-schema.md →

use-cases/charlotte-agent-invocation.md →

use-cases/event-queries.md →

use-cases/export-query-results-csv.md →

use-cases/human-in-the-loop-containment.md →

.codex-plugin/plugin.json

--- before
+++ after
@@ -1,31 +1,14 @@
 {
+  "name": "crowdstrike-falcon-fusion",
+  "version": "1.3.0",
+  "description": "CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import and release, execution monitoring, and Falcon Next-Gen SIEM lookup files.",
   "author": {
     "name": "CrowdStrike",
     "url": "https://github.com/CrowdStrike"
   },
-  "description": "CrowdStrike Falcon Fusion skills for authoring, deploying, and executing Fusion workflows. Includes live action discovery, YAML authoring with schema validation, workflow import and release, execution monitoring, and Falcon Next-Gen SIEM lookup files.",
   "homepage": "https://github.com/CrowdStrike/fusion-skills",
-  "interface": {
-    "brandColor": "#E01F3D",
-    "brandColorDark": "#E01F3D",
-    "capabilities": [
-      "Interactive",
-      "Write"
-    ],
-    "category": "Developer Tools",
-    "composerIcon": "./.codex-plugin/assets/composer-icon.png",
-    "defaultPrompt": [
-      "Create a Falcon Fusion workflow",
-      "Automate a CrowdStrike response",
-      "Troubleshoot a Fusion workflow"
-    ],
-    "developerName": "CrowdStrike",
-    "displayName": "CrowdStrike Falcon Fusion",
-    "logo": "./.codex-plugin/assets/logo.png",
-    "longDescription": "Discover live Falcon Fusion actions, author workflow YAML with schema validation, import and release workflow definitions to a CID, trigger and monitor executions, and manage Falcon Next-Gen SIEM lookup files.",
-    "shortDescription": "Build Falcon Fusion workflows",
-    "websiteURL": "https://github.com/CrowdStrike/fusion-skills"
-  },
+  "repository": "https://github.com/CrowdStrike/fusion-skills",
+  "license": "MIT",
   "keywords": [
     "crowdstrike",
     "falcon",
@@ -35,9 +18,25 @@
     "automation",
     "security"
   ],
-  "license": "MIT",
-  "name": "crowdstrike-falcon-fusion",
-  "repository": "https://github.com/CrowdStrike/fusion-skills",
   "skills": "./skills/",
-  "version": "1.2.0"
-}
\ No newline at end of file
+  "interface": {
+    "displayName": "CrowdStrike Falcon Fusion",
+    "shortDescription": "Build Falcon Fusion workflows",
+    "longDescription": "Discover live Falcon Fusion actions, author workflow YAML with schema validation, import and release workflow definitions to a CID, trigger and monitor executions, and manage Falcon Next-Gen SIEM lookup files.",
+    "developerName": "CrowdStrike",
+    "category": "Developer Tools",
+    "capabilities": [
+      "Interactive",
+      "Write"
+    ],
+    "websiteURL": "https://github.com/CrowdStrike/fusion-skills",
+    "defaultPrompt": [
+      "Create a Falcon Fusion workflow",
+      "Automate a CrowdStrike response",
+      "Troubleshoot a Fusion workflow"
+    ],
+    "brandColor": "#E01F3D",
+    "composerIcon": "./assets/crowdstrike-logo.png",
+    "logo": "./assets/crowdstrike-logo.png"
+  }
+}
Full technical diff · 57 changed fields

removed /files/.codex-plugin~1assets~1composer-icon.png

BEFORE
{
  "sha256": "5132bd5af60a22182bd531e1e9e3f0f11784038b0ef2ef611459af7b80cb6ff9",
  "size": 10229
}
AFTER
Field is absent

removed /files/.codex-plugin~1assets~1logo.png

BEFORE
{
  "sha256": "5132bd5af60a22182bd531e1e9e3f0f11784038b0ef2ef611459af7b80cb6ff9",
  "size": 10229
}
AFTER
Field is absent

changed /files/.codex-plugin~1plugin.json/sha256

BEFORE
"9735ddc72550a40e603b8f3526ef6666d4509cd6691405f0adf6a6536f71aed5"
AFTER
"b5c2ba0be10a2d3d67fa3d9733181f6c894f6cf10c2ccabde61afc7df3b7dea1"

changed /files/.codex-plugin~1plugin.json/size

BEFORE
1612
AFTER
1567

changed /files/README.md/sha256

BEFORE
"433f3f0f6e7cfe2f8fcca06b15eec488cd37e0dd42aa95997d86678b5c1524a1"
AFTER
"fb4e6998be790cccd42179bf416c980e6c701bc33d34b55dd05e6f7a465d7a1e"

changed /files/README.md/size

BEFORE
21865
AFTER
22935

added /files/scripts~1agy-plugin-swap.sh

BEFORE
Field was absent
AFTER
{
  "sha256": "fc21dcb6057925144026d28723f779de105bd503991c568a9367a47ddab7fea2",
  "size": 5555
}

changed /files/scripts~1cleanup_workflows.py/sha256

BEFORE
"6e41f094d4b9c8465152a99c071fa7fca297b5f28fea48a1260512f1a5f1acd4"
AFTER
"8697dd4145b29114c02465e35c880104d31ad6fb1789951735481a3d5327cdab"

changed /files/scripts~1cleanup_workflows.py/size

BEFORE
7070
AFTER
7214

changed /files/skills~1authoring~1SKILL.md/sha256

BEFORE
"732733d47dc20f81555c00ce270825521b23803aaab0763269ab96b743373d33"
AFTER
"49e3e714c2e42759d89e61a2ae796c1b28436d25304410c849e77ce1c8402d9b"

changed /files/skills~1authoring~1SKILL.md/size

BEFORE
21982
AFTER
21800

changed /files/skills~1authoring~1references~1cel-expressions.md/sha256

BEFORE
"748d53856e530a8356c68f8d71a4a9fec26a3f79003da952a85f24406a5b987e"
AFTER
"c1712159db40788ca1bc9bcec1a6a7c478d92be9e9ac6ad755c212901ccae805"

changed /files/skills~1authoring~1references~1cel-expressions.md/size

BEFORE
7921
AFTER
8510

changed /files/skills~1authoring~1references~1charlotte-ai-action.md/sha256

BEFORE
"1f0b8998b68115b92877736d37d7f64a69cf551dfa78db4517322e1e90974ac4"
AFTER
"dd20cdd36e5d5d7fc5ad01e2df1b69f51a972400b914f31b832f8a8bdbbd6cfe"

changed /files/skills~1authoring~1references~1charlotte-ai-action.md/size

BEFORE
2848
AFTER
3276

changed /files/skills~1authoring~1references~1event-query-action.md/sha256

BEFORE
"dc0f2d7d879000bd8898f56b6cdac714b2a7d4164a725e589d5d4a64951f171e"
AFTER
"4b083d429c65fe5482c83827d17021ac86e692baa62a8bde7afbc23bdcea0a58"

changed /files/skills~1authoring~1references~1event-query-action.md/size

BEFORE
7768
AFTER
8957

changed /files/skills~1authoring~1references~1inline-python-action.md/sha256

BEFORE
"f801064dc2592f30ccbf64670d9c417ec27155360da4fe4bc0b9e7988c50a20b"
AFTER
"0ba85b4f86abe93bd75c7e3884e30844b397811f2a4403dcd5dc9ee66610b624"

changed /files/skills~1authoring~1references~1inline-python-action.md/size

BEFORE
2858
AFTER
3200

changed /files/skills~1authoring~1references~1json-structure.md/sha256

BEFORE
"6f372de04b88934d126c4ac884a15861cd6863e7c38de1fc0c353695825793bd"
AFTER
"f46bdb3c203ed3d578f022b776f76f5854d9051d472efde63cf18257bff409bf"

changed /files/skills~1authoring~1references~1json-structure.md/size

BEFORE
27411
AFTER
27566

changed /files/skills~1authoring~1references~1trigger-types.md/sha256

BEFORE
"7570a983aa52fd382013b6fbaecd3eeba287d2f8c732e6f8a69219059cfeeebb"
AFTER
"1b5b30b0a48462b6a189056acc8977335d41b40a2da7019e82c8c3101c06c28c"

changed /files/skills~1authoring~1references~1trigger-types.md/size

BEFORE
16473
AFTER
17848

changed /files/skills~1authoring~1references~1yaml-schema.md/sha256

BEFORE
"8ed40691b82ed3b2b044f645317892b385e1a18f75223a56cf24c451139ca233"
AFTER
"9532c3281091840766e99f4e6ef0de21cb5414bd9acb870684580fe732ec8e49"

changed /files/skills~1authoring~1references~1yaml-schema.md/size

BEFORE
18609
AFTER
19472

changed /files/skills~1authoring~1scripts~1trigger_search.py/sha256

BEFORE
"9e4258afe0d1ef235ea6eea6c942fc4808b440e8fc31a305c4cfa42b1793b223"
AFTER
"919dcff9cfecda0f06bc336f954fea066992821a48cc639fe61e2d57351b545b"

changed /files/skills~1authoring~1scripts~1trigger_search.py/size

BEFORE
14876
AFTER
16093

changed /files/skills~1authoring~1scripts~1validate.py/sha256

BEFORE
"035e61d8c499674551b4c8d4ab36b5591fb6532d91c00b4fa27fff450827f453"
AFTER
"e09bcf7441d2aa5492a23f690a80c4c1c8b84c7dbe46f5b4c1e9a6fc47a78d37"

changed /files/skills~1authoring~1scripts~1validate.py/size

BEFORE
66866
AFTER
69279

changed /files/skills~1deployment~1SKILL.md/sha256

BEFORE
"3322e6bc151b97f981fb984bd543ebc99a2d73abda4eed105450d48560744f9a"
AFTER
"4726b5a89a41c05ec4f13bdf815078b7ce375804dc51641ee2336bbe607d6034"

changed /files/skills~1deployment~1SKILL.md/size

BEFORE
18957
AFTER
18850

changed /files/skills~1deployment~1references~1console-verification.md/sha256

BEFORE
"50ccf1d56e0d34648effa0d98e6f47c24d243ce8358a0564d38b3f39b28a39de"
AFTER
"f06d9d69ecb985bc9eef6fb26d946e5341c5b2fb12d424316005064df9d17dde"

changed /files/skills~1execution~1SKILL.md/sha256

BEFORE
"89aa0dfba24e1fe02987955c91179ba95a382972e97b5ab03ed1682d922699cf"
AFTER
"f3571cfb400b3b4ec4bf2dd85b13c62a66db29aa9de0fa3add3a46765a373507"

changed /files/skills~1execution~1SKILL.md/size

BEFORE
10386
AFTER
10293

changed /files/skills~1foundry-redirect~1SKILL.md/sha256

BEFORE
"396ecf2817de89fa64de0606620ba4460ef26c55190c2555a467834c7c13b888"
AFTER
"4b43b37ece0a82e06883807b2e3b2dce42656e73470683b4f8efe661fc03aac4"

changed /files/skills~1foundry-redirect~1SKILL.md/size

BEFORE
2913
AFTER
3053

changed /files/skills~1lookup-files~1SKILL.md/sha256

BEFORE
"3243ad77d8672d35e0c78b8df21cb97a3889423eacbdbbf91e7f3c00cb24c0c2"
AFTER
"71dfd68c7d1f3ad25d89934e46d0f2187d1900da841bbbc7e779c2eb59119bb0"

changed /files/skills~1lookup-files~1SKILL.md/size

BEFORE
8213
AFTER
8113

changed /files/skills~1lookup-files~1references~1lookup-file-formats.md/sha256

BEFORE
"f2be9c8b00c5d49301ab7992af54e44e869162ffd2072a4a3f4c4d3860d2f62d"
AFTER
"df1f8ebb0bd03489b97bacf1217a7c733d71c2218db361afc8ab13bb748789c2"

changed /files/skills~1lookup-files~1references~1lookup-file-formats.md/size

BEFORE
2948
AFTER
2996

changed /files/skills~1setup~1SKILL.md/sha256

BEFORE
"b24351c3b9d49053b5ed17e42630e8f95c522b168b56bc2d71e48b56b42a3291"
AFTER
"c3f7e71368cb20ab83fa6c5d6abcc591c245454b49f21b86b1f0ebfc905da1a8"

changed /files/skills~1setup~1SKILL.md/size

BEFORE
7424
AFTER
7331

changed /files/skills~1workflows~1SKILL.md/sha256

BEFORE
"9bd47d0dd6e8c28d7681030e62b2cbb3880de2bad10ad3c3c727994bb3f8423f"
AFTER
"570e53904ef8042837836cf927a66ee89824ef43896d74b7408f3b10a9027069"

changed /files/skills~1workflows~1SKILL.md/size

BEFORE
18568
AFTER
18777

removed /files/skills~1workflows~1references~1best-practices.md

BEFORE
{
  "sha256": "d36381a8affd0ef49a22b216cefe03b10fe0ac78d909b3ad9e46bcd6d5bd9ddc",
  "size": 10711
}
AFTER
Field is absent

removed /files/skills~1workflows~1references~1cel-expressions.md

BEFORE
{
  "sha256": "748d53856e530a8356c68f8d71a4a9fec26a3f79003da952a85f24406a5b987e",
  "size": 7921
}
AFTER
Field is absent

removed /files/skills~1workflows~1references~1json-structure.md

BEFORE
{
  "sha256": "3e1904b0adffc250cc39a42d0800d3711d04bd9416021fb11ebd7f371c5de19f",
  "size": 27101
}
AFTER
Field is absent

removed /files/skills~1workflows~1references~1trigger-types.md

BEFORE
{
  "sha256": "9c91ca176ecc679bd00fb73f20262bce7d9eb5a974397997197aa280491636ce",
  "size": 11245
}
AFTER
Field is absent

removed /files/skills~1workflows~1references~1yaml-schema.md

BEFORE
{
  "sha256": "63025aec8ee9f7bbb6fc04eb669b3f8fcac64f0c9ea632db16897f4ccb128675",
  "size": 18873
}
AFTER
Field is absent

changed /files/use-cases~1charlotte-agent-invocation.md/sha256

BEFORE
"a5121f409380057cca0d30d566b643136da9e9e696c30be25e1ad7582fdf1b89"
AFTER
"95a442172e8f6ce9093e50dafe6a9d137cc2db2b7ad3efef306f2e97cfd3a09e"

changed /files/use-cases~1charlotte-agent-invocation.md/size

BEFORE
4449
AFTER
6702

changed /files/use-cases~1event-queries.md/sha256

BEFORE
"66c156c5120636fa09be5259dd2a62edb04a824c736a6eccbdac052aabe86f91"
AFTER
"43b2cf51a3cb73810002e0bdd2d1eb3f07fa2affd54d5377037cec1b4553567d"

changed /files/use-cases~1event-queries.md/size

BEFORE
7814
AFTER
8172

changed /files/use-cases~1export-query-results-csv.md/sha256

BEFORE
"4891cd0298c126e76f348ee698c4000be3cff1493b212dcd1f7b60362fd914d8"
AFTER
"2265cce08bed044229ff0e6e055a68c884eba263ca1f7374976d1fa70afe5f04"

changed /files/use-cases~1export-query-results-csv.md/size

BEFORE
3000
AFTER
4963

changed /files/use-cases~1human-in-the-loop-containment.md/sha256

BEFORE
"5934b20aaed2530a0028cd0f64c23b238c42223f1a004cdcf1c5673c6cf5af7a"
AFTER
"62de9ef2284daa0a0695923ab6f818faa6dcdc88275226b05b864dade82b3019"

changed /files/use-cases~1human-in-the-loop-containment.md/size

BEFORE
6139
AFTER
6444
Full snapshot data
{
  "files": {
    ".codex-plugin/plugin.json": {
      "sha256": "b5c2ba0be10a2d3d67fa3d9733181f6c894f6cf10c2ccabde61afc7df3b7dea1",
      "size": 1567
    },
    "LICENSE": {
      "sha256": "98e0a8035cd69aa3f126e1f6c4f3922d350cb2253ad79807f895d9d04e373d46",
      "size": 1076
    },
    "README.md": {
      "sha256": "fb4e6998be790cccd42179bf416c980e6c701bc33d34b55dd05e6f7a465d7a1e",
      "size": 22935
    },
    "assets/crowdstrike-logo.png": {
      "sha256": "5132bd5af60a22182bd531e1e9e3f0f11784038b0ef2ef611459af7b80cb6ff9",
      "size": 10229
    },
    "common/scripts/_bootstrap.py": {
      "sha256": "80b893f7c22f84739a6760e0a5d6816289c9a39b7fe7c08a30f2938b19fd8bd5",
      "size": 3400
    },
    "common/scripts/auth.py": {
      "sha256": "0ba9567acf51085d5311c8b184626cbb7d1fa9db03062376be4d4fe4837ca0d6",
      "size": 12680
    },
    "requirements.txt": {
      "sha256": "9df301e1198a32e2a6be39f68c35377c6c5b3053f6ec387bdee85c901dc3f9a5",
      "size": 177
    },
    "scripts/agy-plugin-swap.sh": {
      "sha256": "fc21dcb6057925144026d28723f779de105bd503991c568a9367a47ddab7fea2",
      "size": 5555
    },
    "scripts/cleanup_workflows.py": {
      "sha256": "8697dd4145b29114c02465e35c880104d31ad6fb1789951735481a3d5327cdab",
      "size": 7214
    },
    "scripts/convert_catalog_to_yaml.py": {
      "sha256": "8967d3704f098624e4ca7bfaad01da34795b1c1bc432c13b6a34d0a724c5e1a0",
      "size": 16438
    },
    "scripts/export-trigger-yaml.sh": {
      "sha256": "fc4efa16365b0bd8e9036bae1f1a091575488ba850280c5b444563dd5e04e2c6",
      "size": 6638
    },
    "scripts/python-detect.sh": {
      "sha256": "76b6c605f012c4ad39b593e3d17457a934e6bb28709d00dafd8e0a97444506a3",
      "size": 6174
    },
    "scripts/python.sh": {
      "sha256": "1dfcbb8df1367c3005853f6882153c9d04b5c92a8e0477585a897b020e949cd3",
      "size": 1571
    },
    "scripts/setup-python-venv.sh": {
      "sha256": "ffd25b4fdab82825381e13a9bd0010600faaa3d24ed149400251a4f5a5309207",
      "size": 5126
    },
    "scripts/skill-isolation.sh": {
      "sha256": "ac598e4dd3f282aed463a19297703b7c6632fba4cae906d0799dbbd9d4ba2d39",
      "size": 6493
    },
    "skills/authoring/SKILL.md": {
      "sha256": "49e3e714c2e42759d89e61a2ae796c1b28436d25304410c849e77ce1c8402d9b",
      "size": 21800
    },
    "skills/authoring/assets/conditional.yaml": {
      "sha256": "a448a0a9e39dc34f6b7b88b8c6897680cd62b671b57f8605a92b53c71d7b54cd",
      "size": 4490
    },
    "skills/authoring/assets/loop-conditional.yaml": {
      "sha256": "74ffd4ca0630f2c35964c4d7a9aa11e7ccf21322a06bb999538fb9797427949e",
      "size": 7148
    },
    "skills/authoring/assets/loop.yaml": {
      "sha256": "369fa39529d2322909ff7f89f4a870783dd635eb0841a08029c132ea1e9bb6e7",
      "size": 2977
    },
    "skills/authoring/assets/single-action.yaml": {
      "sha256": "29c6872d4da3f9b59c0553ecb6e10c6e58252be47c4a821341ab3a741f047118",
      "size": 1141
    },
    "skills/authoring/examples/README.md": {
      "sha256": "2c33680e6b421857ddf6615d9fed82032699824fcf0f6c07a88301543967157c",
      "size": 7884
    },
    "skills/authoring/examples/identity-response/email-phishing-playbook-itp.yaml": {
      "sha256": "5d224f459bc6ef0af1777be3134fa10890daa3d36f7a5d0d2214ea9b56744bd9",
      "size": 17139
    },
    "skills/authoring/examples/identity-response/identity-detection-auto-resolution.yaml": {
      "sha256": "9975a817164985568dca78c582e7b75046f5abfef23b66e735f4b56d3b0c7952",
      "size": 3037
    },
    "skills/authoring/examples/ngsiem/close-duplicate-detections.yaml": {
      "sha256": "099ccb2d04c08eab85bfce256c9e0eceec96483fe7e0be9d944f54b60a6d5d8d",
      "size": 9752
    },
    "skills/authoring/examples/notifications/network-contain-endpoint-on-detection.yaml": {
      "sha256": "8e11871576f19c880a2fce4b439068055fbb10618b296fef8d486f112bbed8d1",
      "size": 23019
    },
    "skills/authoring/examples/notifications/slack-send-message-to-channel.yaml": {
      "sha256": "b62be4c7447d2b6b2312254ef07491f1e91bb3aa9a03d2d14cd9d547ba0d9d53",
      "size": 1345
    },
    "skills/authoring/examples/response-actions/pan-ngfw-allowlist-edl-exception.yaml": {
      "sha256": "f0d002058aca826f327259ed20ec5cc86755bbc0f5a7258f58aec9ac77f8fac0",
      "size": 3053
    },
    "skills/authoring/examples/response-actions/pan-ngfw-blocklist-edl-force-refresh.yaml": {
      "sha256": "f73e2cd354c652791a0f12fe32f26e2dae6aa282d41629eb679995261ac15372",
      "size": 2025
    },
    "skills/authoring/examples/response-actions/pan-ngfw-get-all-edls.yaml": {
      "sha256": "d2ea74db1a29d7c2556633a796e6d950ace053143f5ea990c438fb3abd7a85ef",
      "size": 1932
    },
    "skills/authoring/examples/response-actions/pan-ngfw-monitor-dag-members.yaml": {
      "sha256": "f4f0ae91684982e7990ef7e77271908fc501b6547c45d3e5c9a95262c3f2d250",
      "size": 1607
    },
    "skills/authoring/examples/response-actions/pan-ngfw-register-ip-tag-dag.yaml": {
      "sha256": "5e2a06cdb002a398881975f6bb4a1a11406897d2ae1b1c7e04993f6d9fadfb3e",
      "size": 2261
    },
    "skills/authoring/examples/response-actions/pan-ngfw-unregister-ip-from-tag-dag.yaml": {
      "sha256": "b67cd9cc9cc4ad66b5b5a49b54228b29500f7f948b781ac58063cf25e13514ee",
      "size": 2069
    },
    "skills/authoring/examples/threat-intel/analyze-enrich-epp-detection-llm.yaml": {
      "sha256": "c19174014006da32fd00e43688eab49b662b8d38127f3726610f73862338cc74",
      "size": 46047
    },
    "skills/authoring/examples/threat-intel/domain-enrichment-pulsedive.yaml": {
      "sha256": "2cd0b1090a298a07139033d18bad99a8bc627762c189529b17a691f2093171a5",
      "size": 32148
    },
    "skills/authoring/examples/threat-intel/domain-enrichment-virustotal.yaml": {
      "sha256": "3c2e503c8c79bb57c6901904bc3587369a87c1d5c186e60b3a63fc8b615001e6",
      "size": 25874
    },
    "skills/authoring/examples/threat-intel/enrich-ip-virustotal-llm-email.yaml": {
      "sha256": "1b0591149a3e7b13a8d356061f1f52a76ab0337be41fc2850cff71a85fc83cd9",
      "size": 7255
    },
    "skills/authoring/examples/threat-intel/enrich-url-virustotal-zscaler-blocklist.yaml": {
      "sha256": "489f31bb2e91350d6fdda575c5f01c771cc7f2bbdad865afccc7d4568ce47863",
      "size": 83013
    },
    "skills/authoring/examples/threat-intel/ip-address-enrichment-abuseipdb.yaml": {
      "sha256": "780b2d714902b3cb92ed4bbdfdf3cd6458fc00d993407226c9c335060c3dd04e",
      "size": 29066
    },
    "skills/authoring/examples/tutorials/crowdstrike-http-request-falcon-api.yaml": {
      "sha256": "95473716af379cf711b59d707b228438c2540a63728adb0e530f262904de37f5",
      "size": 6250
    },
    "skills/authoring/examples/tutorials/intro-cases-add-event.yaml": {
      "sha256": "f56cdd8b9d10de8cd98ab83c0df5e62700280909af4fb46e36aea9cd4369102b",
      "size": 2099
    },
    "skills/authoring/examples/tutorials/intro-data-transforms-ternary.yaml": {
      "sha256": "911067ac8bf57ff7d41830699c5e05638b6c8b0e4071190375188cdbb2d34c79",
      "size": 725
    },
    "skills/authoring/examples/tutorials/intro-deduplicate-third-party-detections.yaml": {
      "sha256": "6048cef43e71f94a189cb026dcf28bab8e5cc26ac376875da491646420b2b462",
      "size": 4589
    },
    "skills/authoring/examples/tutorials/intro-error-handling.yaml": {
      "sha256": "5587d62113b553ff7a4115c53a0462f04025fd48e05fe254c714bf91f3a31c09",
      "size": 8401
    },
    "skills/authoring/examples/tutorials/intro-lookup-file-actions.yaml": {
      "sha256": "1cb0357b9e08b18f6f5571f27ec5a836fc2b323f0771b0db9aadac644592f7fa",
      "size": 9292
    },
    "skills/authoring/examples/tutorials/intro-python-sslbl-lookup.yaml": {
      "sha256": "10d2b9a82de02753b84dc139e558cef141c445232baa1ba408a355bbc46f6900",
      "size": 4104
    },
    "skills/authoring/examples/tutorials/intro-receive-email-trigger.yaml": {
      "sha256": "6cf9b3b917691c1024c79ae126528cb626b1d71e9441f0707a44d2dae546c300",
      "size": 2240
    },
    "skills/authoring/examples/tutorials/intro-variables-append-array.yaml": {
      "sha256": "010233267c4a6e4992e4ab174932bc28595bbeedd09c84166946e1e01daa298c",
      "size": 2504
    },
    "skills/authoring/references/best-practices.md": {
      "sha256": "d4abed8ab7ab90cfc3d0219346a979b634a3332051a2daf96c6897d1126e52fe",
      "size": 10856
    },
    "skills/authoring/references/cel-expressions.md": {
      "sha256": "c1712159db40788ca1bc9bcec1a6a7c478d92be9e9ac6ad755c212901ccae805",
      "size": 8510
    },
    "skills/authoring/references/charlotte-ai-action.md": {
      "sha256": "dd20cdd36e5d5d7fc5ad01e2df1b69f51a972400b914f31b832f8a8bdbbd6cfe",
      "size": 3276
    },
    "skills/authoring/references/deduplicate-ratelimit.md": {
      "sha256": "1d151847e2e9f7f58d874149ee954472060c5d8ffdc7a9d08451f15a3728a932",
      "size": 11983
    },
    "skills/authoring/references/event-query-action.md": {
      "sha256": "4b083d429c65fe5482c83827d17021ac86e692baa62a8bde7afbc23bdcea0a58",
      "size": 8957
    },
    "skills/authoring/references/event-query-vs-api.md": {
      "sha256": "4abe7699d7116b16b1467b94d4a6f7a9c63dd543adc56f45383cf0b495075ccf",
      "size": 7698
    },
    "skills/authoring/references/http-actions.md": {
      "sha256": "77e5150aeeb43f08466bc478d1bf3324c725a6d2a379c5d75bf8affa8dfbcf53",
      "size": 12723
    },
    "skills/authoring/references/inline-python-action.md": {
      "sha256": "0ba85b4f86abe93bd75c7e3884e30844b397811f2a4403dcd5dc9ee66610b624",
      "size": 3200
    },
    "skills/authoring/references/json-structure.md": {
      "sha256": "f46bdb3c203ed3d578f022b776f76f5854d9051d472efde63cf18257bff409bf",
      "size": 27566
    },
    "skills/authoring/references/trigger-types.md": {
      "sha256": "1b5b30b0a48462b6a189056acc8977335d41b40a2da7019e82c8c3101c06c28c",
      "size": 17848
    },
    "skills/authoring/references/yaml-schema.md": {
      "sha256": "9532c3281091840766e99f4e6ef0de21cb5414bd9acb870684580fe732ec8e49",
      "size": 19472
    },
    "skills/authoring/scripts/action_search.py": {
      "sha256": "ea384580ebfe807090dec87935fced18c80f161e5e3cb804b8eaaf46315f13ab",
      "size": 24048
    },
    "skills/authoring/scripts/trigger_search.py": {
      "sha256": "919dcff9cfecda0f06bc336f954fea066992821a48cc639fe61e2d57351b545b",
      "size": 16093
    },
    "skills/authoring/scripts/validate.py": {
      "sha256": "e09bcf7441d2aa5492a23f690a80c4c1c8b84c7dbe46f5b4c1e9a6fc47a78d37",
      "size": 69279
    },
    "skills/authoring/workflows/ngsiem-detection-ti-enrichment-copilot.yaml": {
      "sha256": "5dc29c816a33168404f518b8f46ca817781ddb1cb8e1d436eb562800be7bc6bd",
      "size": 22052
    },
    "skills/deployment/SKILL.md": {
      "sha256": "4726b5a89a41c05ec4f13bdf815078b7ce375804dc51641ee2336bbe607d6034",
      "size": 18850
    },
    "skills/deployment/references/console-verification.md": {
      "sha256": "f06d9d69ecb985bc9eef6fb26d946e5341c5b2fb12d424316005064df9d17dde",
      "size": 4156
    },
    "skills/deployment/scripts/delete_workflow.py": {
      "sha256": "470cebc8971595b21f59df838dbd94973d58f77f9788ab4849bfb73b30210f6a",
      "size": 6777
    },
    "skills/deployment/scripts/export_workflow.py": {
      "sha256": "4619d67fce5a5b9aa9e4b8fafa7e4caccbf84f83d4057f4544afdbfb1ff38255",
      "size": 3860
    },
    "skills/deployment/scripts/import_workflows.py": {
      "sha256": "85d6c34ba6481756119541373e68cfdb846f4cd185b9517850b97a1ccc7b237b",
      "size": 11573
    },
    "skills/deployment/scripts/query_workflows.py": {
      "sha256": "dbe5f5bf5c86936d6b730e3e69df0698565ab9a30ab11aa179adda3fdf4549eb",
      "size": 8180
    },
    "skills/deployment/scripts/release_workflow.py": {
      "sha256": "bffbb1b857e734bac18608bb58d27a7873de34e80dc94857dce9d00168c96614",
      "size": 3033
    },
    "skills/execution/SKILL.md": {
      "sha256": "f3571cfb400b3b4ec4bf2dd85b13c62a66db29aa9de0fa3add3a46765a373507",
      "size": 10293
    },
    "skills/execution/references/execution-log-queries.md": {
      "sha256": "bc227bbfd7dccb159b50c8ebe7f610632154f98c02d0c9198e5d2a8e399dc983",
      "size": 6063
    },
    "skills/execution/references/throttling.md": {
      "sha256": "761276c04ba7d88d104a488698776e7f562fc725eb5f45a5d8fad637adc95d4c",
      "size": 4920
    },
    "skills/execution/scripts/get_execution_results.py": {
      "sha256": "2a77257c2ba688e661c55b231bc21d6131188ee4bce820d1f8a24f8a69255e99",
      "size": 3787
    },
    "skills/execution/scripts/monitor_execution.py": {
      "sha256": "9d3b1924678d929eee1a41ae1c6dea998fe363da3b198aa31830757aea81d4b2",
      "size": 3739
    },
    "skills/execution/scripts/trigger_workflow.py": {
      "sha256": "7325019566624c4374813a7d61531a3ab1b305cdced91829bc22f7ca436047a0",
      "size": 11531
    },
    "skills/foundry-redirect/SKILL.md": {
      "sha256": "4b43b37ece0a82e06883807b2e3b2dce42656e73470683b4f8efe661fc03aac4",
      "size": 3053
    },
    "skills/lookup-files/SKILL.md": {
      "sha256": "71dfd68c7d1f3ad25d89934e46d0f2187d1900da841bbbc7e779c2eb59119bb0",
      "size": 8113
    },
    "skills/lookup-files/assets/example-ip-blocklist.csv": {
      "sha256": "7d629611ba0f47eab6d9ea8372886d4797a58c2b1c7c2d069a899769867746c1",
      "size": 244
    },
    "skills/lookup-files/assets/example-user-risk.csv": {
      "sha256": "754afebe7a3d7d73a2fc0e0b447018dc97a47c1372ed08fa07b4c10700aeac56",
      "size": 195
    },
    "skills/lookup-files/references/cql-match-function.md": {
      "sha256": "12447a82c1176af2b788ed92c789952671f4010f8081958598c53da2dc08f491",
      "size": 3781
    },
    "skills/lookup-files/references/lookup-file-formats.md": {
      "sha256": "df1f8ebb0bd03489b97bacf1217a7c733d71c2218db361afc8ab13bb748789c2",
      "size": 2996
    },
    "skills/lookup-files/scripts/create_lookup.py": {
      "sha256": "95c76bf1963f60aeda8d4d168653fe8e93473cc6ff506287c4c0aacee1de2cb5",
      "size": 4274
    },
    "skills/lookup-files/scripts/delete_lookup.py": {
      "sha256": "6f9c4f0e32cc35b44a08c50142682660139f22acbb13aff5ff9f7bd56948e972",
      "size": 3675
    },
    "skills/lookup-files/scripts/get_lookup.py": {
      "sha256": "e9a23931884557a5557b4e5ff1c604d599ec33c8188570916882521566a552d6",
      "size": 3020
    },
    "skills/lookup-files/scripts/list_lookups.py": {
      "sha256": "754eb3c2fe010eb3fe08eb6f929583afdc881d310a03f6ccae5d10c41a939133",
      "size": 6054
    },
    "skills/lookup-files/scripts/update_lookup.py": {
      "sha256": "5def3c273a383229900c7d405f0350f72f34d63a8a3b0961ef1b14a28d3116cb",
      "size": 3762
    },
    "skills/lookup-files/scripts/verify_lookup.py": {
      "sha256": "c78ff2ef6dd828d9a823856bcbb8f29d9bb1bf930e4ace1abdd1023db65a6072",
      "size": 8502
    },
    "skills/setup/SKILL.md": {
      "sha256": "c3f7e71368cb20ab83fa6c5d6abcc591c245454b49f21b86b1f0ebfc905da1a8",
      "size": 7331
    },
    "skills/workflows/SKILL.md": {
      "sha256": "570e53904ef8042837836cf927a66ee89824ef43896d74b7408f3b10a9027069",
      "size": 18777
    },
    "use-cases/README.md": {
      "sha256": "0b2865ef8893bf1ca2413c8dcd4c9cbb822caef9d374d13fc89442ad1816ebd7",
      "size": 4929
    },
    "use-cases/api-pagination.md": {
      "sha256": "e140a72ee0c8afd35e17fffd118857ee99241ae9d30522da452d32e7dc647d0a",
      "size": 3865
    },
    "use-cases/case-management.md": {
      "sha256": "2008c3673e30bd59dcbed7a8071ae72bae5eaaf0770afb8eba005cc03cbf081c",
      "size": 5515
    },
    "use-cases/charlotte-agent-invocation.md": {
      "sha256": "95a442172e8f6ce9093e50dafe6a9d137cc2db2b7ad3efef306f2e97cfd3a09e",
      "size": 6702
    },
    "use-cases/custom-soar-actions.md": {
      "sha256": "1100e2212ada64616d0934b0252d14350499e570b84748f543cc3b5dd203ec3d",
      "size": 3315
    },
    "use-cases/detection-deduplication.md": {
      "sha256": "af4f67a0e29015b52db27ace3ac0cb54dcc15594fe89926becf8694d0b67802c",
      "size": 5887
    },
    "use-cases/detection-enrichment.md": {
      "sha256": "a120d655da85921e20330ac180a79d06cd93eeef8d0af4e4aff64ca70912092b",
      "size": 4717
    },
    "use-cases/event-queries.md": {
      "sha256": "43b2cf51a3cb73810002e0bdd2d1eb3f07fa2affd54d5377037cec1b4553567d",
      "size": 8172
    },
    "use-cases/export-query-results-csv.md": {
      "sha256": "2265cce08bed044229ff0e6e055a68c884eba263ca1f7374976d1fa70afe5f04",
      "size": 4963
    },
    "use-cases/http-actions.md": {
      "sha256": "68b23dd6cc94dc69c3940f97ed51afa4983f2cf8bc267700411b670dec02e276",
      "size": 7184
    },
    "use-cases/human-in-the-loop-containment.md": {
      "sha256": "62de9ef2284daa0a0695923ab6f818faa6dcdc88275226b05b864dade82b3019",
      "size": 6444
    },
    "use-cases/identity-detection-response.md": {
      "sha256": "cf71fa3f665977ec33eea8b0ff302c062be22b80d2b29ed3176d1eafa044f2f6",
      "size": 4654
    },
    "use-cases/lookup-enrichment.md": {
      "sha256": "e18636bfb21f9eb2628d8eb557d10e9c7874ca00ee5bdf638842f92f4a3b3a46",
      "size": 3005
    },
    "use-cases/lookup-file-management.md": {
      "sha256": "e43fcc68696e716a209b64ed14502589267d233c150a4c709e3fe3ecbc91e2ba",
      "size": 4867
    },
    "use-cases/ngsiem-detection-response.md": {
      "sha256": "5b3009af232c7a594678e6ac160006134bcd351c1bfbae66046e3fd078ac2742",
      "size": 6458
    },
    "use-cases/notifications.md": {
      "sha256": "a87bc3f012a4e1540c2e7f7129cc6728f06f0473f8982c0dd1bb714f3ca79c68",
      "size": 2991
    }
  }
}

SHA-256 of public snapshot: 99f6098a2345aac35b652b74211dbbef14615c25216bb8cc80f9894ec70fa324