MHaggis/Security-Detections-MCP
Cursor rule Claude CodeCursor
Detection and Story creation templates for multiple SIEM platforms.
not rated 502
+2 4mo ago A 440 tokens
502Stars on the repository
38Mods indexed here, across every type
4mo agoLast push, which is what freshness is scored on
noneNo LICENSE: all rights reserved, so bodies are not copied
MHaggis/Security-Detections-MCP
Cursor rule Claude CodeCursor
ONLY CREATE ONE FILE when asked for threat analysis, gap analysis, or coverage reports.
not rated 502
+2 4mo ago A 0 tokens
MHaggis/Security-Detections-MCP
Cursor rule Cursor
Cursor rule "contentctl-path" from MHaggis/Security-Detections-MCP, covering contentctl tool configuration (splunk-specific), location, pip install requirements, option 1: force reinstall and option 2: direct pypi url.
not rated 502
+2 4mo ago A 611 tokens
MHaggis/Security-Detections-MCP
Cursor rule Cursor
The tests: section MUST have valid URLs, NOT placeholder descriptions.
not rated 502
+2 4mo ago A 979 tokens
MHaggis/Security-Detections-MCP
Cursor rule Cursor
Linux detection testing workflow and lessons learned.
not rated 502
+2 4mo ago B 0 tokens
pip-install
06MHaggis/Security-Detections-MCP
Cursor rule Cursor
Any pip install command MUST include one of these options.
not rated 502
+2 4mo ago A 241 tokens
self-healing
07MHaggis/Security-Detections-MCP
Cursor rule Cursor
Self-healing behavior - automatically fix errors and continue.
not rated 502
+2 4mo ago A 603 tokens
MHaggis/Security-Detections-MCP
Cursor rule Cursor
Detection validation tools - location, usage, and multi-SIEM support.
not rated 502
+2 4mo ago A 673 tokens
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: