Deploys and configures Suricata IDS/IPS with Emerging Threats rulesets, EVE JSON logging, and custom rules for high-throughput, protocol-aware traffic inspection (HTTP, TLS, DNS, SMB) and SIEM integration. Use when running Suricata in IDS or inline IPS mode to detect or block malicious traffic, or when combining signature-based and protocol anomaly detection with file extraction.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill configuring-suricata-for-network-monitoringnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill configuring-suricata-for-network-monitoring -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill configuring-suricata-for-network-monitoring -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/configuring-suricata-for-network-monitoringgh skill install mukul975/Anthropic-Cybersecurity-Skills configuring-suricata-for-network-monitoringgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/configuring-suricata-for-network-monitoring ~/.claude/skills/configuring-suricata-for-network-monitoring # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/configuring-suricata-for-network-monitoring ~/.agents/skills/configuring-suricata-for-network-monitoring # Codex, Cursor, Gemini CLI, Copilot, OpenCode