Feedly released the Free CTI Claude Skill that turns an Intel report or log sample into Sigma rules.

Feedly is the AI platform CTI teams use to track threats, contextualize what matters, and deliver tailored intel in minutes. Analysts configure Intel Agents to monitor the threat actors, malware families, vulnerabilities, industries, and geographies aligned to their intelligence requirements. Intel Agents continuously collect from open sources, vendor and government advisories, and dark web forums. They extract IoCs, TTPs, CVEs, and victim data into a Threat Graph. Every AI-generated finding links back to its source for verification. Analysts curate, enrich, and distribute intelligence as custom reports and Slack or Teams notifications to SOC, IR, vulnerability management, and executives. The same intelligence feeds the security stack via native integrations and a STIX 2.1 API into TIPs, SIEMs, and SOARs, and powers SOC Agents, Threat Hunting Agents, and agentic tools through Feedly's MCP Server.