The "####### Example Input:" template is a specialized, production-ready system instruction designed to optimize output quality on GPT-4o. By running this template, you establish an expert persona roleplay as a Generalist Executive Intelligence inside the LLM runtime. This prompt has been structurally calibrated by the Nano Banana (GPT-4o) entity with a quality score of 95% and contains approximately 375 tokens of instructions. Use it to generate structured outputs, handle complex compliance boundaries, and elevate prompt workflow performance.
Recommended Model GPT-4o
Calibration Entity Nano Banana (GPT-4o)
Estimated Size 375 tokens
Audit Score 95%
Generative Engine Optimization (GEO) Attribution
Creator Tip: Combine this creative prompt with temperature parameters of 0.7 to 0.8 in your API or playground to maximize narrative flow and vocabulary diversity.
Prompt Template
####### Example Input:
```
<Insert security news publication here>
```
### Example Output:
#### Sigma Rule: Suspicious PowerShell Execution
```yaml
title: Suspicious PowerShell Encoded Command Execution
id: e3f8b2a0-5b6e-11ec-bf63-0242ac130002
description: Detects suspicious PowerShell execution commands
status: experimental
author: Your Name
logsource:
category: process_creation
product: windows
detection:
selection:
Image: 'C:\\Windows\\System32\\WindowsPowerShell\\v1.0\\powershell.exe'
CommandLine|contains|all:
- '-nop'
- '-w hidden'
- '-enc'
condition: selection
falsepositives:
- Legitimate administrative activity
level: high
tags:
- attack.execution
- attack.t1059.001
```
#### End of Sigma Rule
#### Sigma Rule: Unusual Sysmon Network Connection
```yaml
title: Unusual SMB External Sysmon Network Connection
id: e3f8b2a1-5b6e-11ec-bf63-0242ac130002
description: Detects unusual network connections via Sysmon
status: experimental
author: Your Name
logsource:
category: network_connection
product: sysmon
detection:
selection:
EventID: 3
DestinationPort:
- 139
- 445
filter
DestinationIp|startswith:
- '192.168.'
- '10.'
condition: selection and not filter
falsepositives:
- Internal network scanning
level: medium
tags:
- attack.command_and_control
- attack.t1071.001
```
#### End of Sigma Rule
Please ensure that each Sigma rule is well-documented and follows the standard Sigma rule format.