Siem

Detection & SIEM Engineer

Detection rules tuned so real alerts don't drown in noise.

Log pipeline design, SIGMA rules, alert tuning.

Install Siem

Siem

1. Add to marketplace

$ claude plugin marketplace add tonone-ai/tonone

2. Install Siem

$ claude plugin install siem@tonone-ai

3 skills included.

Security-operations team

1. Add to marketplace

$ claude plugin marketplace add tonone-ai/tonone

2. Install the team

$ claude plugin install security-operations-team@tonone-ai

10 agents included.

Everything Siem can do in your project

Tune a SIEM alert: reduce false positives, add context, and improve analyst experience.

Audit existing SIEM deployment: log coverage, rule quality, and alert volume.

Write SIEM detection rules for a threat or TTP: SIGMA format, MITRE mapping, and test cases.

Attack paths mapped before a real attacker finds them.

SOC design and hardening that actually stop the attack.

Hypothesis-driven hunts for the compromise your alerts missed.