Download

Skill UI

Browse and discover 6648+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search ATT&CK , found 24 results

Default Newest Most Downloaded

SIEM Detection Use Cases

implementing-siem-use-cases-for-detection

mukul975/Anthropic-Cybersecurity-Skills

Helps SOC teams design detection use cases for SIEM platforms by mapping MITRE techniques, creating correlation rules, and formalizing lifecycle management across Splunk, Elastic, and Sentinel for production monitoring.

MISP Threat Intelligence

implementing-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Build a PyMISP-driven threat intelligence platform that ingests multiple IOC feeds, tags MITRE ATT&CK techniques, enriches data via VirusTotal and AbuseIPDB, and exports STIX 2.1 bundles for SIEM pipelines.

MITRE Threat Modeling

implementing-threat-modeling-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Implements MITRE ATT&CK-based threat modeling to map adversary TTPs, evaluate detection coverage, and prioritize defensive investments for SOCs, new environments, purple team exercises, and risk assessments.

ATT&CK Coverage Mapping

mapping-mitre-attack-techniques

mukul975/Anthropic-Cybersecurity-Skills

Maps observed detection rules, Sigma or SIEM alerts, and intelligence on adversaries to MITRE ATT&CK techniques; builds Navigator heatmaps, labels assets with TIDs, and highlights coverage gaps so SOCs can prioritize controls and report threat exposure.

Detect Lateral Movement

performing-lateral-movement-detection

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement such as Pass-the-Hash, PsExec, WMI, RDP, and SMB spreading by correlating Windows logs, NetFlow/Zeek data, and endpoint telemetry mapped to ATT&CK TA0008, supporting SOC investigations and detection engineering.

Purple Team Exercise

performing-purple-team-exercise

mukul975/Anthropic-Cybersecurity-Skills

Coordinates purple-team exercises that align red team attack emulation with blue team detection validation using MITRE ATT&CK scenarios and real-time SOC collaboration.

Elastic SIEM Threat Hunting

performing-threat-hunting-with-elastic-siem

mukul975/Anthropic-Cybersecurity-Skills

Performs proactive threat hunting in Elastic Security SIEM, using KQL/EQL hypotheses, detection rules, and Timelines to find threats that evade automation and validate ATT&CK-based coverage gaps during SOC investigations.

Sharing Threat Intelligence With MISP

performing-threat-intelligence-sharing-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Guide for using PyMISP to create, enrich, and publish threat intelligence events on MISP, manage IOC feeds, apply MITRE ATT&CK/TLP metadata, and export STIX 2.1 for interoperable sharing.

Threat Actor Profiling

profiling-threat-actor-groups

mukul975/Anthropic-Cybersecurity-Skills

Builds detailed profiles of APT groups, criminal syndicates, and hacktivists by aggregating ATT&CK data, campaign history, tooling fingerprints, and attribution indicators; ideal for executive briefings, threat model updates, and SOC preparedness against specific adversaries.

Purple Team Atomic Testing

performing-purple-team-atomic-testing

mukul975/Anthropic-Cybersecurity-Skills

Automates Atomic Red Team executions to validate MITRE ATT&CK coverage, generate Navigator heatmaps, correlate Sigma rules, and measure detection-engineering loops so purple teams can tune SIEM/EDR visibility through repeatable adversary emulation.

Red Team Planner

alirezarezvani/claude-skills

Organizes MITRE ATT&CK-informed red team engagements by scoring techniques on effort and detection risk, sequencing kill-chain phases, identifying choke points, and flagging OPSEC concerns before executing simulations with authorization.

Proactive Threat Detection

threat-detection

alirezarezvani/claude-skills

Provides methodology and tooling for proactive threat hunting, IOC analysis, and statistical anomaly detection across telemetry before alerts fire, including MITRE ATT&CK signal prioritization and deception readiness.

Language