Correlates security events in IBM QRadar SIEM using AQL (Ariel Query Language), custom rules, building blocks, and offense management to detect multi-stage attacks across network, endpoint, and application log sources. Use when SOC analysts need to investigate QRadar offenses, build correlation rules, or tune detection logic for reducing false positives.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill correlating-security-events-in-qradarnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill correlating-security-events-in-qradar -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill correlating-security-events-in-qradar -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/correlating-security-events-in-qradargh skill install mukul975/Anthropic-Cybersecurity-Skills correlating-security-events-in-qradargit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/correlating-security-events-in-qradar ~/.claude/skills/correlating-security-events-in-qradar # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/correlating-security-events-in-qradar ~/.agents/skills/correlating-security-events-in-qradar # Codex, Cursor, Gemini CLI, Copilot, OpenCode