Download

Skill UI

Browse and discover 6557+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search ATT&CK , found 26 results

Default Newest Most Downloaded

Red Team Tactics Guide

red-team-tactics

sickn33/antigravity-awesome-skills

Provides MITRE ATT&CK-based red team principles covering reconnaissance, access, escalation, evasion, movement, reporting, and ethics to guide authorized adversary simulations and defensive validation.

MITRE Navigator APT Heatmaps

analyzing-apt-group-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Automate ATT&CK data queries and MITRE Navigator layer creation to visualize APT group techniques, compare overlays, and expose detection gaps for threat-informed defense.

Mapping Threat Actor Techniques

analyzing-threat-actor-ttps-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Guided workflow for analysts to map threat actor behaviors to MITRE ATT&CK, visualize coverage with ATT&CK Navigator layers, identify detection gaps, and generate actionable intelligence reports leveraging attackcti, stix2, and Navigator tooling.

Threat Actor TTP Mapping

analyzing-threat-actor-ttps-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Generate MITRE ATT&CK Navigator layers for threat actor TTPs using attackcti STIX queries; visualize technique coverage, compare adversary profiles, and highlight defensive gaps when triaging incidents or planning detection and hunting work.

Attack Pattern Library Builder

building-attack-pattern-library-from-cti-reports

mukul975/Anthropic-Cybersecurity-Skills

Extract adversary behaviors from CTI reports, normalize them into STIX 2.1 attack patterns, and assemble a searchable MITRE ATT&CK–aligned library to drive detection engineering output such as Sigma or YARA templates.

Ransomware SOC Playbook

building-soc-playbook-for-ransomware

mukul975/Anthropic-Cybersecurity-Skills

Creates a structured SOC incident response playbook for ransomware, guiding detection rules, triage decision trees, containment, and recovery aligned with NIST SP 800-61 and MITRE ATT&CK.

OSINT Threat Actor Profiling

building-threat-actor-profile-from-osint

mukul975/Anthropic-Cybersecurity-Skills

Build comprehensive threat actor dossiers by aggregating OSINT sources, linking infrastructure with Maltego/SpiderFoot, and mapping TTPs to MITRE ATT&CK for proactive defense and attribution.

Cloud Penetration Testing

conducting-cloud-penetration-testing

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized penetration testing of AWS, Azure, and GCP environments, covering scoping via the shared responsibility model, cloud-specific tooling (Pacu, ScoutSuite, CloudFox), IAM escalation paths, SSRF abuse of metadata services, and reporting aligned to the MITRE ATT&CK Cloud matrix for realistic validation.

Full-Scope Red Team Engagement

conducting-full-scope-red-team-engagement

mukul975/Anthropic-Cybersecurity-Skills

Guides planners through comprehensive red team engagements from reconnaissance to reporting, using MITRE ATT&CK-aligned TTPs to test detection, persistence, and response across the full kill chain in realistic adversary scenarios.

Advanced Persistent Threat Hunting

hunting-advanced-persistent-threats

mukul975/Anthropic-Cybersecurity-Skills

Drives hypothesis-based hunts for Advanced Persistent Threat activity by correlating endpoint telemetry, network logs, and memory artifacts through MITRE ATT&CK tactics before documenting findings or detection rules.

Detect Data Staging

hunting-for-data-staging-before-exfiltration

mukul975/Anthropic-Cybersecurity-Skills

Detect adversary staging before exfiltration by watching for archive tool execution, anomalous temp directory writes, large-file consolidation and suspicious staging paths in EDR/Sysmon telemetry, then score and report events.

Hunting Unusual Connections

hunting-for-unusual-network-connections

mukul975/Anthropic-Cybersecurity-Skills

Guide for proactively hunting unusual outbound connections by analyzing rare destinations, nonstandard ports, and anomalous frequencies across EDR/SIEM telemetry, correlating findings with ATT&CK techniques to validate threats and recommend responses.

Language