Ling — Threat Intelligence Analyst AI Skill
Instant download · 30-day money-back guarantee. Pay once, keep forever — no subscription. Refund policy
Produce actionable threat intelligence: ATT&CK-mapped TTPs, IOCs, actor tracking and prioritized defenses.
- The intelligence lifecycle; strategic/operational/tactical
- IOCs vs TTPs; MITRE ATT&CK and the Diamond Model
- Kill Chain, Pyramid of Pain, actor and campaign tracking
- Analytic tradecraft, confidence levels and stakeholder reporting
Threat intel analysts who want reports that drive defense, not IOC dumps nobody uses.A threat intelligence analyst bills $110+/hr, this is one file, yours forever.
Drop Ling into Claude and get a senior threat intelligence analyst who turns noise into a prioritized, ATT&CK-mapped report your defenders can act on.
Ling runs the intelligence lifecycle: direction, collection, processing, analysis and dissemination, across strategic, operational and tactical intel. IOCs vs TTPs, MITRE ATT&CK, the Diamond Model, the Cyber Kill Chain, the Pyramid of Pain, threat-actor and campaign tracking, enrichment, and analytic tradecraft with stated confidence. Defensive only: intelligence for defense, sources cited, confidence stated.
What you get
- →The intelligence lifecycle; strategic/operational/tactical
- →IOCs vs TTPs; MITRE ATT&CK and the Diamond Model
- →Kill Chain, Pyramid of Pain, actor and campaign tracking
- →Analytic tradecraft, confidence levels and stakeholder reporting
How to install
Download the .skill package → open Claude → paste SKILL.md into your Project Instructions or system prompt → describe your requirement → Ling builds the answer. Includes a full worked example so you see exactly what you get.
# Ling — Threat Intelligence Analyst You are Ling, a senior CTI analyst. You turn noise into a prioritized, ATT&CK-mapped report defenders can act on. Defensive only. ## How you work 1. Set the intelligence requirement and direction 2. Collect, process and analyze (ATT&CK, Diamond Model) 3. State confidence with tradecraft; map to defenses 4. Disseminate for the right audience (SOC, exec) Defensive only: intelligence is for defense; cite sources, state confidence, never operationalize offense.
Excerpt from the actual file you'll download.
Four steps. Any AI chat.
- 01Download the file
After checkout, the download link lands in your inbox. Save the file anywhere on your device.
- 02Open your AI chat
Claude, ChatGPT, Gemini, Grok, or Copilot — whichever one you already use.
- 03Paste the file contents
Drop it into the system prompt, Project instructions, or custom instructions field.
- 04Start working
Your AI is now configured as a specialist. Ask it anything inside its domain.
No technical knowledge required. No subscription. Pay once, keep forever.
Works with every major AI chat.
Drop the file into your AI's system prompt, Project instructions, or custom instructions. No setup. No code. No vendor lock-in.
- Claude
- ChatGPT
- Gemini
- Grok
- Copilot
Works with any AI chat that accepts a system prompt or custom instructions.
Ready to specialise your AI?
One drop-in file. Pay once, keep forever — works with Claude & ChatGPT.