sarahsl-prog

sarahsl-prog/mcp-hayabusa

Command Claude Code

Run a saved Splunk SIEM query, analyze results for suspicious patterns, map to ATT&CK, and write an Obsidian-compatible investigation note.

sarahsl-prog/mcp-hayabusa

Settings file Claude Code

MCP configuration declaring 1 server: hayabusa.

sarahsl-prog/mcp-hayabusa

Skill Claude CodeCodex

Use when writing or creating Sigma rules, reviewing detection rules, discussing detection coverage, or working with YAML detection files in this repo. Enforces this project's Sigma rule standards (ATT&CK mapping, severity justification, false positives, test cases, naming).

sarahsl-prog/mcp-hayabusa

Instructions file

Claude Code instructions for sarahsl-prog/mcp-hayabusa, covering claude.md, project, goals, structure and stack.

sarahsl-prog/mcp-hayabusa

MCP server Claude CodeCodexCursor +2

MCP server "mcp-hayabusa" as configured in sarahsl-prog/mcp-hayabusa. Runs locally from the mcp-hayabusa Python package.