Create detection rules and hunting queries from malware analysis findings. Use when you need to write Sigma rules for SIEM, Suricata rules for network IDS, defang IOCs for safe sharing, or convert analysis findings into actionable detection content for SOC teams and threat hunters.
Install
npx skills add gl0bal01/malware-analysis-claude-skills --skill detection-engineernpx skills add gl0bal01/malware-analysis-claude-skills --skill detection-engineer -a claude-code -gnpx skills add gl0bal01/malware-analysis-claude-skills --skill detection-engineer -a codex -ggemini skills install https://github.com/gl0bal01/malware-analysis-claude-skills.git --path detection-engineergh skill install gl0bal01/malware-analysis-claude-skills detection-engineergit clone --depth 1 https://github.com/gl0bal01/malware-analysis-claude-skills /tmp/gl0bal01__malware-analysis-claude-skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/gl0bal01__malware-analysis-claude-skills/detection-engineer ~/.claude/skills/detection-engineer # Claude Code
cp -R /tmp/gl0bal01__malware-analysis-claude-skills/detection-engineer ~/.agents/skills/detection-engineer # Codex, Cursor, Gemini CLI, Copilot, OpenCode