Download

Skill UI

Browse and discover 7129+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search ATT&CK , found 19 results

Default Newest Most Downloaded

Red Team Tactics Guide

red-team-tactics

sickn33/antigravity-awesome-skills

Provides MITRE ATT&CK-based red team principles covering reconnaissance, access, escalation, evasion, movement, reporting, and ethics to guide authorized adversary simulations and defensive validation.

MITRE Navigator TTP Mapping

analyzing-threat-actor-ttps-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Leverage attackcti to pull ATT&CK STIX/TAXII data, correlate APT group techniques, generate MITRE Navigator layer files, and compare defensive coverage to highlight detection gaps.

Attack Pattern Library Builder

building-attack-pattern-library-from-cti-reports

mukul975/Anthropic-Cybersecurity-Skills

Extracts adversary behaviors from CTI reports, maps them to MITRE ATT&CK IDs, and compiles STIX-based attack-pattern records so defenders can query tactics/techniques and generate detection templates.

Sigma Detection Rule Builder

building-detection-rules-with-sigma

mukul975/Anthropic-Cybersecurity-Skills

Helps SOC teams author portable Sigma detection rules, validate syntax, and convert them into Splunk, Elastic, or Sentinel queries while tagging MITRE ATT&CK coverage.

OSINT Threat Actor Profiling

building-threat-actor-profile-from-osint

mukul975/Anthropic-Cybersecurity-Skills

Aggregates public intelligence sources, vendor reports, and link-analysis tools like Maltego and SpiderFoot to craft structured threat actor dossiers, map TTPs via ATT&CK, and inform proactive defense and attribution workflows.

Cloud Penetration Testing Guide

conducting-cloud-penetration-testing

mukul975/Anthropic-Cybersecurity-Skills

Provides structured methodologies for authorized AWS, Azure, and GCP penetration tests, covering scoping, reconnaissance, IAM privilege escalation, SSRF-to-metadata validation, and MITRE ATT&CK Cloud reporting.

Full-Scope Red Teaming

conducting-full-scope-red-team-engagement

mukul975/Anthropic-Cybersecurity-Skills

Guides planning and executing MITRE ATT&CK-aligned red team engagements from reconnaissance through reporting, emphasizing stealthy payloads, lateral movement, defined objectives like domain dominance and data exfiltration, and the legal/prerequisite controls needed to validate detection and response readiness.

Hunt Advanced Persistent Threats

hunting-advanced-persistent-threats

mukul975/Anthropic-Cybersecurity-Skills

Proactively hunt for Advanced Persistent Threats (APTs) by building hypothesis-driven searches across telemetry, network logs, and memory artifacts, using MITRE ATT&CK, Velociraptor, osquery, Zeek, and Sigma-compatible playbooks to validate or rule out known TTPs.

Process Injection Hunting

hunting-for-process-injection-techniques

mukul975/Anthropic-Cybersecurity-Skills

Hunts MITRE ATT&CK T1055 process-injection techniques via Sysmon Event IDs 8/10 and EDR telemetry, parsing JSON logs to flag CreateRemoteThread calls, risky access masks, and reporting severity with mitigation guidance.

Detect Unusual Windows Services

hunting-for-unusual-service-installations

mukul975/Anthropic-Cybersecurity-Skills

Hunt malicious Windows services by parsing System.evtx Event ID 7045 records, analyzing binary paths (temp folders, PowerShell/cmd patterns), flagging risky indicators, and mapping findings to MITRE ATT&CK T1543.003 for SOC reporting.

Continuous Security Validation

implementing-continuous-security-validation-with-bas

mukul975/Anthropic-Cybersecurity-Skills

Automates continuous validation of security controls by emulating real attack techniques with BAS platforms such as SafeBreach, AttackIQ, or Cymulate, aligning results with MITRE ATT&CK and operational readiness.

MITRE Attack Coverage Mapping

implementing-mitre-attack-coverage-mapping

mukul975/Anthropic-Cybersecurity-Skills

Implements MITRE ATT&CK coverage mapping by exporting SIEM detection rules, building coverage matrices, scoring techniques, and surfacing gaps so SOC teams can prioritize rule development and track detection maturity.

Language