Reduces SIEM false positives through systematic rule tuning, threshold adjustment, correlation logic refinement, allowlisting, and threat intelligence enrichment. Use when SOC analysts are overwhelmed by alert noise, when tuning noisy detection rules, or during a quarterly SIEM rule review to cut alert fatigue.
Install
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-false-positive-reduction-in-siemnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-false-positive-reduction-in-siem -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill performing-false-positive-reduction-in-siem -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/performing-false-positive-reduction-in-siemgh skill install mukul975/Anthropic-Cybersecurity-Skills performing-false-positive-reduction-in-siemgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-false-positive-reduction-in-siem ~/.claude/skills/performing-false-positive-reduction-in-siem # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/performing-false-positive-reduction-in-siem ~/.agents/skills/performing-false-positive-reduction-in-siem # Codex, Cursor, Gemini CLI, Copilot, OpenCode