mcpField

tdir-rules

tdir-1258344699.cos.ap-guangzhou.myqcloud.comSecurity79 installs

About tdir-rules

Browse the detection-rule catalog and full-library distribution summary (rules list --summary); retrieve Sigma source (rules get), version history and before/after detection comparisons (rules versions), and whitelist queries (rules whitelists) and draft creation/deletion (rules whitelists draft, add to whitelist); review alert-hit trends and anomalies (rules trend), linked insight verdicts and false-positive rates (rules verdicts); validate rules and manage offline drafts (draft); and use rules ops to access RuleAgent (automated rule-optimization campaigns, tasks, reports, and rule-review tickets) and the evaluation platform (evaluation cycles, engine detections and false-positive rates, POC sample results, and evaluation tickets). Does not directly modify active production versions, enable or disable rules, or publish them.

Install

Copy the command and run it in a terminal.

$npx skills add https://tdir-1258344699.cos.ap-guangzhou.myqcloud.com --skill tdir-rules

After installing, type/tdir-rulesin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/
eval-platform-ops.md
rule-agent-ops.md
rule-explanation.md
rule-lookup.md

Comments

Markdown supported