detection engineering plugins

4 tagged detection engineering, measured the same way as everything else here.

gauntlet-loop

02

trilwu/gauntlet-loop-skills

Plugin Claude Code

Skills packaging the Gauntlet Loop — build → blind-critic → revise → repeat against a hard bar — for coding, writing, design, data, research, prompt evaluation, detection engineering, and authorized security testing.

3 1mo ago A tokens not measured original MIT

wrg-sigma-rules

03

WRG-11/wrg-sigma-rules

Plugin Claude Code

Production-grade sigma detection rule writing, validation, and conversion for SOC analysts and threat-intel teams. LLM-assisted draft + pySigma validation + multi-backend conversion (Splunk, Elastic, OpenSearch, Wazuh) with logsource-aware processing pipelines. Ships a 278-rule published corpus spanning 14 MITRE…

2 8d ago A tokens not measured original MIT

threadlinqs-cmd/intelthreadlinqs-mcp

Plugin Claude Code

Curated cyber-threat intelligence in Claude — 81 read-only tools across threats, SPL/KQL/Sigma detections, IOCs, MITRE ATT&CK, CVE/CWE, C2 infrastructure, and threat-actor attribution. Purple/Gold tier.

0 8d ago A tokens not measured original MIT