Blue Team Detection And Response

Blue Team Detection And Response is a Quality skill for Claude Code, published by telagod in code-abyss.

239 stars32 forkson telagod/code-abyssAdded 2026/09/03Repository updated 2026/07/19

agent-skillsai-agentai-assistantai-personalityblue-teamcharacter-cardclaude-codeclicodexcodex-cliconfigurationdeveloper-toolsdevopsgemini-clipersonaprompt-engineeringred-teamsecurityskills

Install in seconds

Install Blue Team Detection And Response

Copy Blue Team Detection And Response into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/telagod/code-abyss/tree/main/skills/detecting-and-responding ~/.claude/skills/detecting-and-responding

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/telagod/code-abyss.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/detecting-and-responding/SKILL.md in telagod/code-abyss
Installs to: ~/.claude/skills/detecting-and-responding
Collection: One of 25 skills cataloged from this repository
Category: Quality — 1478 skills

What Blue Team Detection And Response does

Blue Team Detection And Response covers detection rule writing, SIEM/EDR tuning, incident response, forensic analysis, threat hunting, and purple team exercises. Use it when building detection-as-code and closing the loop to ATT&CK.

Blue Team Detection And Response is cataloged under Quality on DirSkills. Blue Team Detection And Response comes from a repository tagged agent-skills, ai-agent, ai-assistant, ai-personality and blue-team.

Documentation

README

Excerpt

蓝队检测与响应 · 镇魔盾

判断先于执行：决定「是否做 / 选什么 / 如何取舍」（栈、方案、架构、权衡）前，先读领域判断内核 skills/_kernel/security/SKILL.md——它管 judgment，本秘典管 execution；冲突时以内核判断为准。

检测是工程，不是运气。每条规则必须能回答四问：what / why / FP rate / response。站在防御侧，把告警当代码维护、把事件当事故管理、把狩猎当假设验证。信级：项目日志/EDR 原始事件 > Sigma/YARA 规则库 > ATT&CK 官方矩阵 > 训练记忆（标 [unverified]）。

路由

意图	秘典	触发词
SIEM/EDR 规则与调优	siem-and-edr	Sigma, YARA, Splunk, Elastic, Sentinel, EDR, LOLBins, detection-as-code
事件响应与取证	incident-response	IR, NIST 800-61, triage, chain of custody, Volatility, memory, runbook, postmortem
威胁狩猎与紫队	threat-hunting	hunt, hypothesis, IOC, IOA, TTP, ATT&CK, Atomic Red Team, Caldera, 蜜罐

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Blue Team Detection And Response

What else does telagod publish alongside Blue Team Detection And Response?
Blue Team Detection And Response is one of 25 skills that DirSkills catalogs from telagod/code-abyss, the repository it ships in. Its siblings there include Adversarial Review Orchestration, Analyzing Changes and Analyzing Spreadsheets. Each one is a separate skill with its own page in this directory, installs the same way Blue Team Detection And Response does, and is maintained by telagod in that same repository. The rest of the collection is listed on the telagod/code-abyss page.
How does Blue Team Detection And Response compare to other Quality skills?
Blue Team Detection And Response ranks #1344 by stars among the 1478 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Blue Team Detection And Response against them. Open each page to compare what they document and how they install.