72 tagged siem, measured the same way as everything else here.
Browse within: soc 60Autonomous Agents 37agentic-ai 37security-automation 37splunk 23spl 13mitre-attack 10enterprise-security 9log-analysis 9sigma 9detection-engineering 8bug-bounty 7elastic 7security-monitoring 7
Skill Claude CodeCodex
Use the rsigma CLI and MCP server: engine eval, engine daemon, rule lint, rule draft, rule tune, rule backtest, backend convert, mcp serve. Prefer MCP tools when rsigma mcp serve is connected. For authoring Sigma YAML (detection, correlation, filters, pipelines, modifiers), use the sigma-rules skill. Use this skill…
Skill Claude Code
Map incidents, control checks and SCA results to ISO 27001:2022, PCI DSS v4.0.1, NIST SP 800-53r5 and CIS Controls v8.1 and write auditor-ready evidence statements; use for compliance checks, audit questions, or incidents on regulated assets.
Skill Claude CodeCodex
Before running a risky shell command, check it with Sigil's assess and refuse anything Sigil would block. Use whenever you are about to execute a destructive, privileged, or unfamiliar command.
At most 3 mods per repository are shown here, and a mod shipped inside a plugin is left to that plugin's page — the rest are on their repository pages: