custom-signatures

Official

Create and deploy THOR detection signatures

AuthorNextronSystems
Version1.0.0
Installs0

System Documentation

What problem does it solve?

THOR users often need to tailor detection content by adding IOCs, YARA rules, Sigma rules, and STIX indicators. This skill provides a structured workflow to create, organize, and deploy custom signatures that integrate with THOR’s custom-signatures folder.

Core Features & Use Cases

  • Supports multiple content types: simple IOCs, encrypted IOCs, YARA rules, Sigma rules, and STIX indicators.
  • Enables versioned deployment and automated loading of custom signatures during THOR scans.
  • Real-world use case: security teams share tailored indicators across environments to detect organization-specific threats and reduce false positives.

Quick Start

Place your IOCs, YARA rules, Sigma rules, and STIX indicators in the custom-signatures folder to enable THOR to load and deploy your signatures.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: custom-signatures
Download link: https://github.com/NextronSystems/thor-skill/archive/main.zip#custom-signatures

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.