17 tagged detection engineering, measured the same way as everything else here.
Browse within: blue-team 9cybersecurity 9detection-as-code 9detection-rules 9fastapi 9
MHaggis/Security-Detections-MCP
Cursor rule Cursor
Cursor rule "contentctl-path" from MHaggis/Security-Detections-MCP, covering contentctl tool configuration (splunk-specific), location, pip install requirements, option 1: force reinstall and option 2: direct pypi url.
MHaggis/Security-Detections-MCP
Cursor rule Cursor
The tests: section MUST have valid URLs, NOT placeholder descriptions.
MHaggis/Security-Detections-MCP
Cursor rule Cursor
Self-healing behavior - automatically fix errors and continue.
Cursor rule Cursor
Require explicit user approval before running or creating tests that mutate active agent configs.
Cursor rule Cursor
Langchain workflow changes must work regardless of model/provider choice.
Cursor rule Cursor
UI designer rules — theme variables, color usage, no literal hex in app code.