Deploys and configures Wazuh SIEM/XDR for endpoint detection, covering agent authentication and management, custom decoder and rule XML creation, alert querying via the Wazuh REST API, rule testing with wazuh-logtest, and automated active-response actions. Use when setting up endpoint detection and response, writing or testing custom Wazuh rules, or querying and triaging Wazuh alerts.
安装
npx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-endpoint-detection-with-wazuhnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-endpoint-detection-with-wazuh -a claude-code -gnpx skills add mukul975/Anthropic-Cybersecurity-Skills --skill implementing-endpoint-detection-with-wazuh -a codex -ggemini skills install https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git --path skills/implementing-endpoint-detection-with-wazuhgh skill install mukul975/Anthropic-Cybersecurity-Skills implementing-endpoint-detection-with-wazuhgit clone --depth 1 https://github.com/mukul975/Anthropic-Cybersecurity-Skills /tmp/mukul975__Anthropic-Cybersecurity-Skills
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-endpoint-detection-with-wazuh ~/.claude/skills/implementing-endpoint-detection-with-wazuh # Claude Code
cp -R /tmp/mukul975__Anthropic-Cybersecurity-Skills/skills/implementing-endpoint-detection-with-wazuh ~/.agents/skills/implementing-endpoint-detection-with-wazuh # Codex, Cursor, Gemini CLI, Copilot, OpenCode