Anthropic Claude
Designed to assist security professionals with security investigations, threat hunting, and anomaly detection, leveraging Anthropic Claude's natural language conversational capabilities.
- Category
- Messaging and Conferencing
- Pack
- AnthropicClaude
Configuration parameters
- url — Server URL (required)
- apikey —
- model-select — Model
- model-freetext — Model (Optional - overrides selected choice)
- max_tokens — Max tokens (required)
- temperature — Temperature
- top_p — Top P
- compliance_apikey — Compliance Access Key
- organization_uuid — Organization UUID
- isFetchEvents — Fetch events
- activity_types — Activity types
- max_events_per_fetch — Maximum number of events per fetch
- eventFetchInterval — Events Fetch Interval
- insecure — Trust any certificate (not secure)
- proxy — Use system proxy settings
Commands (18)
- claude-chat-file-delete — Permanently delete a Claude file (a conversation file or a project binary file) via the Compliance API. This is an irreversible hard delete, and it requires a Compliance Access Key with the delete:compliance_user_data scope. Deleting an already-deleted or unknown file ID succeeds (idempotent).
- claude-check-email-body — Check email body for possible security issues. It is possible to keep asking questions on the provided info using 'claude-send-message'. Resets conversation context by default.
- claude-check-email-header — Checking email header for possible security issues. It is possible to keep asking questions on the provided info using 'claude-send-message'. Resets conversation context by default.
- claude-create-soc-email-template — Create an email template out of the conversation context to be sent from the SOC.
- claude-get-events — Manually retrieve Activity Feed events from the Anthropic Compliance API for testing and troubleshooting. Use this command for development and debugging only, as it may produce duplicate events, exceed API rate limits, or disrupt the fetch mechanism.
- claude-get-project-document — Retrieve a project document including its text content (Compliance API).
- claude-list-chat-messages — List the messages of a chat (Compliance API).
- claude-list-chats — List chats metadata (Compliance API).
- claude-list-group-members — List the members of a group (Compliance API).
- claude-list-groups — List groups, or retrieve a single group when group_id is provided (Compliance API).
- claude-list-organization-users — List the users of an organization (Compliance API).
- claude-list-organizations — List the organizations under the parent organization (Compliance API).
- claude-list-project-attachments — List the attachments of a project (Compliance API).
- claude-list-projects — List projects, or retrieve a single project when project_id is provided (Compliance API).
- claude-list-role-permissions — List the permissions of a role (Compliance API).
- claude-list-roles — List roles of an organization, or retrieve a single role when role_id is provided (Compliance API).
- claude-project-document-delete — Permanently delete a Claude project document (a plain-text project_doc) via the Compliance API. This is an irreversible hard delete, and it requires a Compliance Access Key with the delete:compliance_user_data scope. Deleting an already-deleted or unknown document ID succeeds (idempotent).
- claude-send-message — Send a plain message to the selected Claude model and receive the generated response.