关于
This skill provides a guided, multi-phase workflow for security engineers to map raw log data to the OCSF standard using Tenzir's TQL. It automates the process of identifying appropriate OCSF event classes, selecting relevant profiles (like Host or OSINT), and generating structured mapping operators. By integrating validation via the ocsf::cast operator and automated testing, it ensures that cybersecurity data is normalized, compliant, and ready for cross-platform interoperability within the Tenzir ecosystem.