Simoon896/ai-detection-engineering-platform
Cursor rule Cursor
Safety constraints for Atomic Red Team detonation via atomic-redteam MCP. Apply when running ART tests, using runatomic, or working under tools/redteam/.
Simoon896/ai-detection-engineering-platform
Cursor rule Cursor
Wazuh detection engineer behavior after Atomic Red Team handoff. Apply when correlating ART runs with alerts, tuning rules, or updating tools/redteam/coverage.md.
Simoon896/ai-detection-engineering-platform
Skill Claude CodeCodexCursor
Safely execute Atomic Red Team tests on the allowlisted Windows VM via atomic-redteam MCP only, with per-phase user approval, ART-only tests, mandatory cleanup, and handoff to Wazuh detection engineers. Use when detonating ART tests, running runatomic, red team validation, or detection coverage testing.
Simoon896/ai-detection-engineering-platform
Skill Claude CodeCodexCursor
Correlate Atomic Red Team ledger runs with Wazuh alerts, tune detections safely, and update coverage after ART handoff. Use when analyzing ART detonation results, searching alerts for windowsTest, or closing the red team to detection engineering loop.
Simoon896/ai-detection-engineering-platform
Instructions file CodexOpenCode
AGENTS.md instructions for Simoon896/ai-detection-engineering-platform, covering agent roles — wazuh + atomic red team, red team operator, wazuh detection engineer, shared artifacts and mcp allowlist.
Simoon896/ai-detection-engineering-platform
MCP server Claude CodeCodexCursor +2
MCP server "ai-detection-engineering-platform" as configured in Simoon896/ai-detection-engineering-platform. Runs locally from the ai-detection-engineering-platform Python package.