gl0bal01/malware-analysis-claude-skills · detection-engineer/SKILL.md
detection-engineer skillA
Create detection rules and hunting queries from malware analysis findings. Use when you need to write Sigma rules for SIEM, Suricata rules for network IDS, defang IOCs for safe sharing, or convert analysis findings into actionable detection content for SOC teams and threat hunters.
Latest version
mdr add gl0bal01/malware-analysis-claude-skills/detection-engineer@git:20260905.e1d9a1aExact content
mdr add gl0bal01/malware-analysis-claude-skills/detection-engineer@sha256:0d3fb38097c24075Badge
[](https://markdownregistry.com/a/art_tvzp2uvqzkr2cwr4)
0 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260905.e1d9a1a latest | 2026-09-05 | e1d9a1a | 24,173 B | A | view · diff |
| git:20260905.fd80b2a | 2026-09-05 | fd80b2a | 23,778 B | A | view · diff |
| git:20260903.0eb8f5d | 2026-09-03 | 0eb8f5d | 21,931 B | A | view · diff |
| git:20260412.09f91e4 | 2026-04-12 | 09f91e4 | 21,325 B | A | view · diff |
| git:20251027.43cc347 | 2025-10-27 | 43cc347 | 21,124 B | A | view |
Audit of the latest version
A 17 of 17 checks passed. Deterministic, no model, same answer every run.
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (24173 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
gl0bal01/malware-analysis-claude-skills · 46 stars · license MIT · pushed 2026-09-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_tvzp2uvqzkr2cwr4 GET https://markdownregistry.com/api/v1/resolve?ref=gl0bal01/malware-analysis-claude-skills/detection-engineer GET https://markdownregistry.com/api/v1/blob/0d3fb38097c240756f6faeb764cecd0e58c50fa529d0df6a7e96ff1b0bff6a09