claude

detection-engineering

Detection engineering: detection-as-code rule development (Sigma/YARA/KQL/SPL), ATT&CK coverage gap analysis, and hypothesis-driven threat hunting.

11 on GitHubby Jassicsv0.1.0GPL-3.0updated 3 months agodomain
/

Plugin detection-engineering from marketplace awesome-claude-security in jassics/awesome-claude-security. Commands read from the repo's manifest — 1 month ago.

What it installs

Skills (3)

  • detection-coverage-review

    Assess detection coverage against the MITRE ATT&CK matrix: which tactics/techniques are covered, partially covered, or blind, weighted by data-source availability and threat relevance. Use to find and prioritize detection gaps for a SOC/program.

  • detection-rule-development

    Develop or review a detection rule (Sigma, YARA, KQL/SPL/EQL) for a specific behavior or threat, mapped to MITRE ATT&CK, with test cases and false-positive tuning. Use when building, porting, or reviewing detections from a TTP, IOC, or incident finding.

  • threat-hunting

    Run a hypothesis-driven threat hunt: form a hypothesis (often from ATT&CK or threat intel), query telemetry for evidence, analyze findings, and convert results into detections. Use to proactively search for adversary activity that existing alerts may miss.

View source on GitHub jassics.github.io

More from jassics/awesome-claude-security

All 45 plugins →

ai-safety

claude

AI safety (distinct from security): harm modeling, safety evaluations, responsible red-teaming, bias/fairness, guardrail review, and responsible-AI governance.

6 skills · 1 agent

11

Security for autonomous, tool-using AI agents: review, tool-permission audit, and autonomy-boundary testing for excessive agency.

6 skills

11

CISO executive toolkit: security strategy & roadmap, cyber-risk quantification, and board/executive decks. Auto-installs reporting, diagramming, and threat-modeling.

3 skills · 1 command · 1 agent

11

grc

claude

Governance, risk & compliance: framework gap-assessments (SOC 2 / ISO 27001 / PCI / HIPAA / GDPR / NIST), security risk assessment & register, and policy management. Auto-installs reporting + diagramming.

3 skills · 1 command · 1 agent

11

Security architect role bundle: secure-by-design architecture and design review, threat modeling, control selection, and trust-boundary analysis. Auto-installs its core stack.

3 skills · 1 command · 1 agent

11

Attack trees, threat-model DFDs, architecture diagrams, mindmaps, and infographics for security work (Excalidraw-based).

5 skills

11

Similar plugins

Matt Pocock's agent skills for real engineering (grilling, spec/ticket flows, TDD, code review, domain modelling and more).

39 skills

mattpocock/skills 323,108

Design fluency for frontend development. 1 skill with 24 commands (/impeccable polish, /impeccable audit, /impeccable critique, etc.) and curated anti-pattern detection.

1 skill · 4 agents · hooks

pbakaus/impeccable 109,099

IoT device lifecycle, telemetry anomaly detection, fleet management, and witness chain verification for Cognitum Seed hardware

5 skills · 1 command · 4 agents

ruvnet/ruflo 81,589

Install the "Architecture & Domain Modeling" editorial skill bundle for Claude Code.

13 skills

sickn33/agentic-awesome-skills 49,620

Connect Claude Code directly to your CockroachDB clusters for hands-on database work — explore schemas, write optimized SQL, debug queries, and manage distributed database clusters. This plugin provides 14 tools across two active MCP backends (self-hosted MCP Toolbox and managed CockroachDB Cloud MCP Server), three specialized agents (DBA, Developer, Operator), 32 skills across 6 operational domains, and built-in safety hooks.

34 skills · 3 agents · 3 MCP servers · hooks

anthropics/claude-plugins-official 47,076

Content freshness analysis, cannibalization detection, and authority building for SEO

3 agents

wshobson/agents 42,461

Maintain detection-engineering?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins45 plugins