{"product_id":"detection-rule-writer","title":"Detection Rule Writer","description":"\u003cdiv\u003eGenerates production-ready SIEM detection logic from a described threat scenario, including the detection rule in the target platform's syntax (Panther Python, Sigma, or KQL), tuning guidance to suppress false positives, test cases with matching and non-matching events, MITRE ATT\u0026amp;CK mapping, and an alert triage runbook. Use when translating a threat behavior, attack technique, or incident into a working detection rule for edge and network telemetry.\u003c\/div\u003e\u003cdiv\u003e\u003c\/div\u003e\u003cdiv\u003e\u003cem\u003eThis skill is delivered as a \u003ccode\u003e.zip\u003c\/code\u003e archive containing the skill in a named folder, matching the Anthropic SKILL.md format. Extract directly into your Claude Code skills directory (\u003ccode\u003e~\/.claude\/skills\/\u003c\/code\u003e) to install — or open and paste the contents into Claude.ai, ChatGPT, or any other AI tool.\u003c\/em\u003e\u003c\/div\u003e","brand":"penguin tree ai","offers":[{"title":"Default Title","offer_id":67607262593326,"sku":"detection-rule-writer","price":0.0,"currency_code":"USD","in_stock":true}],"thumbnail_url":"\/\/cdn.shopify.com\/s\/files\/1\/0982\/4203\/6014\/files\/detection-rule-writer_0a5a9b7b-76a5-4d2c-93ae-46d74bb2edc0.png?v=1790905237","url":"https:\/\/penguintree.ai\/products\/detection-rule-writer","provider":"penguin tree ai","version":"1.0","type":"link"}