{"node":{"id":"803ce229-82c1-4629-a9ee-327c77715b71","handle":"803ce","type":"note","authorName":"Vincent Yeung","intent":"learning","title":"Source: SentinelOne's SOC analyst skills","aiSummary":null,"content":"**What it is:** s1-secops-skills, part of SentinelOne's ai-siem repo on GitHub. It packages a security analyst as Claude skills: a persona file, an umbrella skill, one skill per tool, servers that connect to SentinelOne, and tests that pin facts.\n\n**Made by:** SentinelOne. Licence AGPL-3.0, so it's restated here in our words, not copied.\n\n**Where:** github.com/Sentinel-One/ai-siem, under plugins/s1-secops-skills.\n\n**Can we run it?** No. Its skills drive a SentinelOne account, which we don't have. It's read as a practice to learn from.\n\n**What we took from it:** thirteen methods for agents people can trust, in \"Pattern: what a security analyst's skills teach about trustworthy agents\".","capturedAt":"2026-10-29T10:53:09.895Z","createdAt":"2026-10-29T10:53:09.896Z","updatedAt":"2026-11-06T04:43:49.486Z","spanId":null,"contributor":null,"audiences":[{"kind":"public","createdAt":"2026-11-06T04:27:13.960Z"}],"fingerprint":"3a3d90b4fbd49274e5915f5d212ee172a81ddc756ed1289b9a415b03fb2c64f4","revisionNo":"3","structureHash":"dec6547f72c65e328f135c3693781dec0284080d4ef47d9c9fc939f014860e13","page":"https://lattris.com/by/b/memories/803ce229-82c1-4629-a9ee-327c77715b71"},"links":[{"direction":"in","verb":"references","reason":"Read this for where the thirteen methods came from, its licence, and why we can't run it.","hash":"9c3c45ed32bf0199ed644a2ba56fe1a20079ada0c4da1a80efb9d730ca0b584e","node":{"id":"e2b3711a-3994-45cf-a2b8-5458de00a198","handle":"e2b3","type":"note","title":"Pattern: what a security analyst's skills teach about trustworthy agents","aiSummary":null,"erased":false,"href":"https://lattris.com/api/lattris/by/b/memories/e2b3711a-3994-45cf-a2b8-5458de00a198?links=1","fingerprint":"14c0a8f8f82bc2cb90c05ebfb1527d79b11b2982c126d8e0ad26a7fae88e539d","revisionNo":"2","structureHash":"4ffcc75504ea50cadb3731754e68d6e006daab131fb5ea3d92adf3349092ac9a","intent":"learning","authorName":"Vincent Yeung","page":"https://lattris.com/by/b/memories/e2b3711a-3994-45cf-a2b8-5458de00a198"}}],"dictionary":{"lattris":"A personal knowledge base — how a person captures what they know as linked blocks they own and control. To understand how this knowledge base works: https://lattris.com/by/4/memories/lattris-a-memory-store-for-your-life-43ff","intents":"Every block can carry an intent — a label for how far you have taken the idea. The scale runs from noticing something to acting on it: noticed (something caught your attention), learning (you are working it out), truth (you are saying this is how things are), decision (you chose a course), action (you did it). Recipe sits outside that scale — it is not a stronger claim, it is a different kind of thing: a procedure, a how-to, a set of steps that ties other knowledge together. Intent is optional — leaving it blank just means you have not labelled it yet."},"instructions_to_ai":"This is knowledge from a personal knowledge base. Read it and consider how it's relevant to what the person you're talking to needs. Follow the linked blocks to explore further related topics if it might be useful to the user; open each at its page address. Start by letting the user know what this is about and how it may be relevant to them."}