Download

Skill UI

Browse and discover 9222+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Total 5894 skills

Default Newest Most Downloaded

Hunt Advanced Persistent Threats

hunting-advanced-persistent-threats

mukul975/Anthropic-Cybersecurity-Skills

Proactively hunt for Advanced Persistent Threats (APTs) by building hypothesis-driven searches across telemetry, network logs, and memory artifacts, using MITRE ATT&CK, Velociraptor, osquery, Zeek, and Sigma-compatible playbooks to validate or rule out known TTPs.

Credential Stuffing Hunting

hunting-credential-stuffing-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detects and investigates credential stuffing by analyzing authentication logs for login velocity anomalies, ASN diversity, password spray behavior, and geographic inconsistencies so SOC teams can build detection rules with Splunk or pandas.

Anomalous PowerShell Hunt

hunting-for-anomalous-powershell-execution

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Script Block Logging (4104), Module Logging (4103), and process creation events in EVTX exports to detect obfuscated PowerShell activity, AMSI bypass attempts, encoded payloads, download cradles, credential dumping, and to prioritize findings for SOC analysts.

Beaconing Frequency Hunting

hunting-for-beaconing-with-frequency-analysis

mukul975/Anthropic-Cybersecurity-Skills

Apply frequency analysis, jitter metrics, and coefficient-of-variation scoring to Zeek/proxy logs and SIEM data to surface periodic C2 beaconing, enrich with threat intelligence, correlate endpoints, and prioritize high-risk callbacks during threat hunting.

Detect Cobalt Strike Beacons

hunting-for-cobalt-strike-beacons

mukul975/Anthropic-Cybersecurity-Skills

Detect Cobalt Strike beacon callbacks by correlating TLS certificate signatures, JA3/JA3S/JARM fingerprints, HTTP C2 profile matches, beacon interval jitter, and Zeek/Suricata/Python PCAP analysis to flag high-confidence activity and suggest responses.

Command and Control Beaconing Detection

hunting-for-command-and-control-beaconing

mukul975/Anthropic-Cybersecurity-Skills

Detects command-and-control beaconing in network telemetry via frequency/jitter analysis, reputation checks, and endpoint context so hunters can spotlight compromised hosts and guide response workflows.

Defense Evasion Timestomping

hunting-for-defense-evasion-via-timestomping

mukul975/Anthropic-Cybersecurity-Skills

Detects NTFS timestomping (MITRE T1070.006) by comparing $STANDARD_INFORMATION and $FILE_NAME timestamps from analyzeMFT/MFTECmd output, enabling threat hunters to flag anomalous temporal edits in forensic timelines.

DNS Persistence Hunting Guide

hunting-for-dns-based-persistence

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step skill to hunt DNS-based persistence by auditing zone baselines, querying SecurityTrails passive DNS, analyzing provider audit logs, and correlating anomalies to malicious infrastructure for actionable reports.

Zeek DNS Tunnel Detection

hunting-for-dns-tunneling-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek dns.log for long queries, high-entropy subdomains, unusual record types, and query volumes to detect DNS tunneling and covert data exfiltration before it reaches other channels.

Detect WMI Lateral Movement

hunting-for-lateral-movement-via-wmi

mukul975/Anthropic-Cybersecurity-Skills

Hunt for WMI-based lateral movement by parsing Windows Event ID 4688 and Sysmon Event ID 1 logs, flagging WmiPrvSE.exe child processes, suspicious command lines, and WMI subscription persistence to produce a structured alert report.

Cloud Threat Hunt

hunting-for-living-off-the-cloud-techniques

mukul975/Anthropic-Cybersecurity-Skills

Hunts for adversary abuse of legitimate cloud services by layering telemetry from EDR, SIEM, and threat intelligence to detect C2, staging, or exfiltration activity across Azure, AWS, GCP, and SaaS platforms.

Hunt Living-off-land Binaries

hunting-for-living-off-the-land-binaries

mukul975/Anthropic-Cybersecurity-Skills

Hunts adversary abuse of legitimate system binaries by correlating EDR/SIEM telemetry, comparing anomalous command-lines and parent chains to baselines, then packaging detections/IOCs for response teams.

Prev 1 2 3...294 295 296297298 299 300...490 491 492 Next

Language