defensive-detection-engineering

What problem does it solve?

Detection engineering for detection rules across SIEM pipelines, enabling consistent lifecycle management from development to production.

Core Features & Use Cases

• Sigma rule development and validation
• MITRE ATT&CK Navigator coverage mapping and gap analysis
• FP tuning, rule quality scoring, and promotion from experimental to stable
• KQL-based telemetry to monitor alert volumes and production readiness
• Use Case: Threat hunters and SOC engineers can rapidly implement and validate rules across enterprise data sources.

Quick Start

Load this skill into Claude to begin a Sigma rule development workflow with MITRE mapping and FP tuning.