Our first article on the RPI framework covered the why: coding agents do their best work when you split a task into Research, Plan and Implement, and keep each phase's context clean. This one is the how. It is the working setup we use day to day with Claude Code subagents, including the parts that went wrong. Nothing here is a benchmark. It is one... Weiterlesen
Intelligence View
⚡ tsecurity.de Intelligence
RPI in Practice: Research, Plan, Implement with Claude Code Subagents
Our first article on the RPI framework covered the why: coding agents do their best work when you split a task into Research, Plan and Implement, and keep each phase's context clean. This one is the how. It is the working setup we use…
Reagiere als Erste:r — dein Feedback zählt!
IR-PLAYBOOK-VULN-REMEDIATION
MEDIUMSOC Incident Playbook: Vulnerability Remediation & Verification
1-Click Detection Engineering: Sigma & YARA Rules
SOC Readytitle: Detect Exploitation - RPI in Practice: Research, Plan, Implement with Claude Code Subagents
id: 732e1d0d-5404-4eb6-a3c9-332eabde7ac2
status: experimental
description: Automatisch generierte SIEM-Erkennungsregel basierend auf CTI Intelligence
references:
- https://tsecurity.de/
author: iShareStuff CTI Automated Detection Engine
date: 2026-09-24
logsource:
category: network_connection
product: any
detection:
selection:
CommandLine|contains:
- 'exploit'
condition: selection
falsepositives:
- Legitime administrative Zugriffe oder Penetrationstests
level: high
tags:
- attack.initial_accessrule CTI_Threat_Indicator {
meta:
author = "iShareStuff CTI Automated Detection Engine"
date = "2026-09-24"
description = "YARA Signature for "
strings:
$str = "RPI in Practice: Research, Pla" ascii wide
condition:
any of them
}
SOCIAL SHARE CARD GENERATOR