Automate blue-team defense workflows for monitoring and incident response.
npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill blue-teamer
Please help me install this Agent Skill. Skill: blue-teamer Source: https://github.com/YukiIto1999/ctf-sleuth/tree/main/.claude/skills/blue-teamer Command: npx skills add https://github.com/YukiIto1999/ctf-sleuth --skill blue-teamer
Blue-team operations require structured workflows for monitoring, detection engineering, triage, and incident response; this Skill provides a guided approach to implement defensive practices consistently.
Describe the steps to establish a blue-team monitoring and incident-response workflow for a newly detected security event.
High-intent search queries and answers about installing and using this skill.
Detection engineering for Sigma, Splunk, Suricata, and YARA is automated through structured workflows that guide rule creation for consistent monitoring and threat detection across IT environments.
SIEM alert triage is handled by automating blue-team defense workflows, applying structured guidance and safety checks to investigate suspicious activity while preserving system availability.
Incident response planning is automated by establishing a guided blue-team workflow that structures monitoring, triage, and response steps to address newly detected security events consistently.
Network monitoring and log analysis are supported through structured defensive workflows that include guardrails and safety checks specifically designed to preserve system availability during incident response.
Structured blue-team workflows are needed when building detections, triaging alerts, or planning incident response, ensuring defensive practices are applied consistently across complex IT environments.
salmanabdurrahmanAnalyze PCAP and flow logs to detect security threats and anomalous patterns.
zenobi-usCoordinate incident response for security breaches and operational incidents.
dandyeEnrich IOC indicators with GTI and Chronicle SIEM context to output threat findings and summaries.
thoreinsteinGenerates blameless postmortems with root-cause analysis for software incidents.
