asp-module-creator

asp-module-creator creates ASP custom alert processing modules. Use it to generate custom/modules modules from SIEM rule samples and project conventions.

Invocation

/asp-module-creator

The skill reads local project conventions and can use asp dev stream ... --output json to fetch development stream samples.

Common Examples

/asp-module-creator generate a module from this SIEM rule and raw_alert sample

/asp-module-creator read the latest 3 custom-module-events messages and infer field mapping

/asp-module-creator check whether the new module correctly creates Case, Alert, and Artifact fields

Related CLI commands:

asp dev stream head custom-module-events -n 3 --output json
asp dev stream read custom-module-events 0-1 --output json