Add the marketplace
/plugin marketplace add ThomasPark20/ActionerInstall plugins
/pluginRun these commands in Claude Code to add this plugin to your environment. The marketplace must be added before you can install its plugins.
On-demand: research a threat and generate Sigma/YARA/Snort/Suricata rules (PoC/advisory-specific default, opt-in TTP; labeled compile-status × confidence; Splunk/CrowdStrike-portable; critic-gated). Autonomous: a daily routine researches qualifying feed items and commits detections.