claudecodex

Investigation Theory

Run disciplined SOC and DFIR investigations from evidence to disposition.

3 on GitHubby norandomv1.0.1updated 19 days agoSecurity
/

Plugin investigation-theory from marketplace norandom-skills in norandom/Skills. Commands read from the repo's manifest — 18 days ago.

What it installs

Skills (1)

  • investigation-theory

    Guide SOC and DFIR investigations with Investigation Theory's Diagnostic Inquiry workflow. Use for alert triage, evidence and log analysis, phishing, lateral movement, C2, malware, exfiltration, and insider cases. Produces case notes, playbooks, timelines, dispositions, compromise reports, and revie

View source on GitHub osroadwarrior.info

More from norandom/Skills

All 10 plugins →

COBESY

claudecodex

Turn knowledge into communication and adoption people act on.

1 skill

3

Build and review auditable finance models and analysis.

1 skill

3

draw.io

claudecodex

Create clear draw.io diagrams from structured requirements.

1 skill

3

Similar plugins

ecc

claudecodex

Harness-native ECC operator layer - 71 agents, 314 skills, 98 legacy command shims, reusable hooks, rules, selective install profiles, and production-ready workflows for Claude Code, Codex, OpenCode, Cursor, and related agent harnesses

200 skills · 98 commands · 71 agents · 1 MCP server · hooks

affaan-m/ECC 302,088

Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.

hooks

anthropics/claude-code 155,476

Cross-installation agent federation with zero-trust security, PII-gated data flow, and compliance-grade audit trails

3 skills · 1 command · 1 agent

ruvnet/ruflo 81,589

duende-skills

claudecodex

Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture

24 skills · 2 agents

anthropics/claude-plugins-official 47,076

SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening

5 skills · 3 commands · 2 agents

wshobson/agents 42,461

Maintain Investigation Theory?

This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.

claude & codex plugins10 plugins