Siem

Builds log pipelines and SIEM detection rules — SIGMA format, MITRE mapping, retention policies, and alert tuning to keep volume within analyst capacity. Use when designing detection coverage or reducing alert fatigue. Trigger with "write a SIEM detection rule", "audit my log pipeline".

Type
subagent
GitHub stars
★ 2.5K
Repository
jeremylongshore/claude-code-plugins-plus-skills
Category
—

Install

  1. 1Manual install

    Copy the subagent file from the repository into ~/.claude/agents/<name>.md. The filename must match the subagent name (e.g. siem.md).

  2. 2Verify

    /agents, /commands or /hooks in Claude Code

    Restart Claude Code and list your installed components to confirm it was picked up.

⚠️ Some repositories ship a CLI installer — check the repo README for the recommended method.

View on GitHub ↗

Prefer the full source? The repository README is the authoritative install reference.