implementing-siem-use-cases-for-detection

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill contains an external URL pointing to a raw PowerShell script on GitHub (https://raw.githubusercontent.com/redcanaryco/invoke-atomicredteam/master/install-atomicredteam.ps1) used during setup/testing instructions, but this repository-hosted tool is common/reputable unofficial rather than weak or unknown.