blue team hooks

mukul975/Threatswarm

Hook Claude Code

Runs before the agent uses a tool for Bash tool calls, executing scope_check.py via python3. From mukul975/Threatswarm.

mukul975/Threatswarm

Hook Claude Code

Runs after a tool call finishes for Bash tool calls, executing cmd_log.sh via bash. From mukul975/Threatswarm.

mukul975/Threatswarm

Hook Claude Code

Runs when the agent finishes a response, executing findings_sync.py via python3. From mukul975/Threatswarm.

26zl/cybersec-toolkit

Hook Claude Code

Runs when a session starts, executing agent-guard.sh via bash. From 26zl/cybersec-toolkit.

26zl/cybersec-toolkit

Hook Claude Code

Runs before the agent uses a tool for Bash tool calls, executing agent-guard.sh via bash. From 26zl/cybersec-toolkit.

Brad-Edwards/aptl

Hook Claude Code

Runs before the agent uses a tool for Edit and Write tool calls, executing protect_files.sh. From Brad-Edwards/aptl.

dfirtnt/Huntable-CTI-Studio

Hook Claude Code

Runs before the agent uses a tool for Edit and Write tool calls, running an inline shell check. From dfirtnt/Huntable-CTI-Studio.

dfirtnt/Huntable-CTI-Studio

Hook Claude Code

Runs after a tool call finishes for Edit and Write tool calls, running an inline shell check. From dfirtnt/Huntable-CTI-Studio.

omeryemba/mcp-hayabusa

Hook Claude Code

Runs when a session starts, executing check-prereqs.sh. From omeryemba/mcp-hayabusa.

omeryemba/mcp-hayabusa

Hook Claude Code

Runs before the agent uses a tool, executing check-sensitive.sh. From omeryemba/mcp-hayabusa.

omeryemba/mcp-hayabusa

Hook Claude Code

Runs after a tool call finishes for Write, Edit, Write and Edit tool calls, executing log_modified_file.py and validate-rule.sh via python (2 commands). From omeryemba/mcp-hayabusa.