sammyboi81

Logging Detection Response — Development skill for Claude Code

Development community

What to log, how to alert, and an incident response loop that limits breach damage.

How to install Logging Detection Response

Installs to ~/.claude/skills/sammyboi81-bulwark-mcp-logging-detection-response/SKILL.md

Terminal

mkdir -p ~/.claude/skills/sammyboi81-bulwark-mcp-logging-detection-response && curl -fsSL https://raw.githubusercontent.com/sammyboi81/bulwark-mcp/HEAD/skills/logging-detection-response.md -o ~/.claude/skills/sammyboi81-bulwark-mcp-logging-detection-response/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Logging Detection Response does

name: logging-detection-response description: What to log, how to alert, and an incident response loop that limits breach damage. tags: detection, response, breach

Log (structured, timestamped, tamper-resistant)

Authn success/failure, MFA events, password/recovery changes, privilege and permission changes, authz denials, admin actions, data export/bulk reads, config changes, API key creation, unusual volumes, outbound connection anomalies.
Include who, what object, from where, res

Alternatives in Development

Metrics Dashboard — Define product metrics dashboard with sources and alert thresholds 7.8k ★
Om Incident Capture — Incident Capture 4.6k ★
Breach Check — HIBP k-anonymity check on a password wordlist 4.5k ★