Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
10 changes: 2 additions & 8 deletions ai-security/prompt-engineering/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,15 +22,9 @@ layout:

# Prompt Engineering

### Introduction
Use AI-assisted analysis carefully in security operations. Check outputs against the original logs, product documentation and investigation evidence before acting on a recommendation.

**Artificial intelligence**—particularly generative AI and large language models (LLMs)—has become a core tool in cybersecurity operations. From accelerating threat detection to automating incident response and enriching threat intelligence, AI augments defenders' capabilities at an unprecedented scale.

However, **the quality of AI outputs depends almost entirely on the quality of the inputs:** this is where prompt engineering comes in. Prompt engineering is the disciplined practice of crafting precise, structured, context-rich instructions (prompts) to guide AI models toward reliable, accurate, and actionable results.

While some argue that autonomous AI agents and auto-optimisation reduce the need for manual prompting (e.g., shifting focus to oversight and judgement), prompt engineering remains essential in cybersecurity, where precision, evidence-based reasoning, hallucination avoidance, and auditability are non-negotiable.

This page explores why prompt engineering matters profoundly for cyber defenders (SOC analysts, DFIR practitioners, threat hunters, and detection engineers) and the broader cybersecurity field.
## Background

### What Is Prompt Engineering?

Expand Down
16 changes: 2 additions & 14 deletions knowledge-base/tools-how-to/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,21 +22,9 @@ layout:

# Tools How-To

## Operational Tooling Guides
Practical notes for security tooling. Use these guides to understand capabilities, prerequisites and common investigative workflows. Verify all commands before use on production systems.

#### Master the Instruments of Cyber Warfare

**Theory is useless without execution.**

This section is the technical field manual for the tools that define the battlefield. Whether you are hunting persistence in memory, mapping an adversary's perimeter, or living off the land, proficiency with these binaries is non-negotiable.

We do not provide "man page" summaries. We provide operational syntax—the exact flags, chains, and logic required to achieve effects in real-world environments.

***

[Select Your Weapon →](https://rootguard.gitbook.io/cyberops/resources-hub/tool-arsenal)

***
## Tool guides

### The Philosophy of Tooling

Expand Down
12 changes: 3 additions & 9 deletions resources-hub/tool-arsenal/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,17 +22,11 @@ layout:

# Tool Arsenal

## Operational Tooling for the Modern Defender
Find tools used for authorised security operations, evidence collection and investigation. Check the tool's current documentation, version and licensing before using commands from RootGuard.

**Automate. Hunt. Eradicate.**
## Tools and workflows

Manual forensics doesn't scale. RootGuard Operational Tooling bridges the gap between detection and remediation, providing battle-tested tools to accelerate triage, automate evidence collection, and execute deep-dive investigations.

This is not a script dump. This is a curated armoury of frameworks designed to function in hostile environments without deployment friction.

***

### The Arsenal
## The Arsenal

#### 🛡️ Custodian-HT

Expand Down
Loading