Implements SIEM detection use cases by designing correlation rules, threshold alerts, and behavioral analytics mapped to MITRE ATT&CK techniques across Splunk, Elastic, and Sentinel. Use when SOC teams need to expand detection coverage, formalize use case lifecycle management, or build a detection library aligned to organizational threat profile.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-siem-use-cases-for-detectionnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-siem-use-cases-for-detection -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-siem-use-cases-for-detection -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/implementing-siem-use-cases-for-detectiongh skill install mukul975/Anthropic-Cybersecurity-Skills implementing-siem-use-cases-for-detectiongit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-siem-use-cases-for-detection ~/.claude/skills/implementing-siem-use-cases-for-detection # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-siem-use-cases-for-detection ~/.agents/skills/implementing-siem-use-cases-for-detection # Codex, Cursor, Gemini CLI, Copilot, OpenCode