detection rules skills

24 tagged detection rules, measured the same way as everything else here.

Browse within: blue-team 23cybersecurity 23detection-as-code 23detection-engineering 23fastapi 23

dfirtnt/Huntable-CTI-Studio

Skill Claude CodeCodex

Add a new extraction sub-agent to Huntable CTI Studio as a first-class peer of CmdlineExtract, ProcTreeExtract, HuntQueriesExtract, RegistryExtract, ServicesExtract, and ScheduledTasksExtract. Use this skill whenever the user asks to "add a new agent", "create a sub-agent", "wire up a new extractor", "add a new…

11 4d ago A 129 tokens original MIT

dfirtnt/Huntable-CTI-Studio

Skill Claude CodeCodexCursor

Audit test coverage gaps and generate unit tests to close them. Use when the user says "test trueup", "coverage gaps", "test coverage audit", "fill coverage", "write missing tests", "backfill tests", "scope tests", "test what I changed", or any request to identify and fill test gaps. Three modes: audit (report only)…

11 4d ago A 96 tokens original MIT

mdu

03

dfirtnt/Huntable-CTI-Studio

Skill Claude CodeCodexCursor

Update all Markdown documentation to reflect code and session changes. Use this skill whenever the user says "mdu", asks to "update docs", "sync documentation", "refresh changelog", "update the changelog", "docs are stale", "add this to the changelog", or any request to align documentation with recent code changes.…

11 4d ago A 203 tokens original MIT