detection-engineer

Features and purpose

Create detection rules and hunting queries from malware analysis findings. Use when you need to write Sigma rules for SIEM, Suricata rules for network IDS, defang IOCs for safe sharing, or convert analysis findings into actionable detection content for SOC teams and threat hunters.

Quick start

Follow the repository instructions for this skill and your agent. Review the files and dependencies before adding it to your workflow.