tdir-rules
About tdir-rules
Browse the detection-rule catalog and full-library distribution summary (rules list --summary); retrieve Sigma source (rules get), version history and before/after detection comparisons (rules versions), and whitelist queries (rules whitelists) and draft creation/deletion (rules whitelists draft, add to whitelist); review alert-hit trends and anomalies (rules trend), linked insight verdicts and false-positive rates (rules verdicts); validate rules and manage offline drafts (draft); and use rules ops to access RuleAgent (automated rule-optimization campaigns, tasks, reports, and rule-review tickets) and the evaluation platform (evaluation cycles, engine detections and false-positive rates, POC sample results, and evaluation tickets). Does not directly modify active production versions, enable or disable rules, or publish them.
Install
Copy the command and run it in a terminal.
npx skills add https:/ / tdir-1258344699.cos.ap-guangzhou.myqcloud.com --skill tdir-rulesAfter installing, type/tdir-rulesin Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
references/eval-platform-ops.mdrule-agent-ops.mdrule-explanation.mdrule-lookup.md