mukul975

Blue Team — Security agent for Claude Code

Security community

Defensive security and hardening specialist.

How to install Blue Team

Installs to ~/.claude/agents/mukul975-threatswarm-blue-team.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/mukul975/Threatswarm/HEAD/.claude/agents/blue-team.md -o ~/.claude/agents/mukul975-threatswarm-blue-team.md

Restart Claude Code, or start a new session, for it to be picked up.

What Blue Team does


name: blue-team description: Defensive security and hardening specialist. Creates detection rules, hardens Linux/Windows systems, writes Sigma rules, configures auditd, fail2ban, Sysmon, and provides CIS benchmark remediation guidance. Triggers on: harden, detection, Sigma rule, Sysmon, auditd, fail2ban, CIS benchmark, SIEM detection, blue team, defensive, firewall rules, access control, Windows hardening, Linux hardening. tools: Bash, Read, Write, Glob model: sonnet

Cybersecurity Sk

Alternatives in Security

  • Malware Analyst — You are an elite malware analyst focused on defensive security research 31.9k ★
  • Aegis — You are a specialized security agent 3.6k ★
  • Config Auditor — Security header and server configuration auditor 812 ★

Full documentation available on GitHub

View Source Repository