transilienceai

Transilience Mdr Rainer — DevOps skill for Claude Code

DevOps community

Claude Code skills for AWS MDR workflows: CloudTrail collection, evidence packaging, baselining, detection engineering, triage, and reporting.

How to install Transilience Mdr Rainer

This entry records only its repository, not the path inside it, so there is no exact command to give. Open transilienceai/transilience-mdr-rainer and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Transilience Mdr Rainer does

Claude Code skills for AWS MDR workflows: CloudTrail collection, evidence packaging, baselining, detection engineering, triage, and reporting.

Alternatives in DevOps

AWS Skills Pack — AWS cloud services skills 1.6k ★
Proxy — route Claude Code requests through multiple upstream providers (OpenCode Go, OpenCode Zen, and AWS Bedrock) wi 957 ★
Helm Conductor — Use the @helm-conductor agent to orchestrate the engineering cycle — sequence features, decide what to work on 523 ★

README

Cloud Detection

[![Built by Transilience](https://img.shields.io/badge/Built%20by-Transilience.ai-4A90D9)](https://www.transilience.ai) [![MIT License](https://img.shields.io/badge/License-MIT-green.svg)](https://choosealicense.com/licenses/mit/) [![AWS](https://img.shields.io/badge/Cloud-AWS-orange)](https://aws.amazon.com/) [![Claude AI](https://img.shields.io/badge/Powered%20by-Claude%20AI-blue)](https://claude.ai)

**Open-source Claude Code skills for authorized MDR, AWS CloudTrail investigation, detection engineering, and security operations reporting.**

[Quick Start](#quick-start) | [Skills](#skills) | [Architecture](#architecture) | [Contributing](CONTRIBUTING.md) | [Security](SECURITY.md)

Overview

Cloud Detection is a skills-first MDR toolkit. The initial release focuses on AWS CloudTrail workflows:

Collect reproducible CloudTrail management events.
Normalize CloudTrail-shaped records into stable observations.
Preserve raw evidence separately from analysis views.
Build business-as-usual baselines.
Generate backend-neutral detection specs.
Triage findings with business context and residual risk.
Package Markdown reports for review.

The repository keeps runnable MDR projects under `projects/`. Skills are organized by lifecycle stage under `detection/`, `chaining/`, `investigation/`, `collection/`, and `reporting/` (each a plugin in `.claude-plugin/marketplace.json`). The runnable `projects/aws-mdr/` demo symlinks to the canonical CloudTrail skills so a plain clone still works.

Prerequisites

Python 3.11+ recommended.
Claude Code for skill-driven workflows.
AWS credentials only when running live collection.
boto3 and botocore for lookup-collector.

Quick Start

git clone https://github.com/transilienceai/cloud-detection.git
cd cloud-detection
python3 -m venv .venv
source .venv/bin/activate
pip install -r requirements.txt
cd projects/aws-mdr

Run the synthetic smoke work