Download

Skill UI

Browse and discover 7107+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search C2-Detection , found 10 results

Default Newest Most Downloaded

Cobalt Strike Profile Analysis

analyzing-cobalt-strike-malleable-profiles

mukul975/Anthropic-Cybersecurity-Skills

Parses Cobalt Strike malleable C2 profiles via pyMalleableC2 to pull beacon configs, HTTP communication patterns, sleep/jitter settings, and combines JARM scans for C2 detection when hunting suspected infrastructure or building IDS signatures.

DNS Exfiltration Detection

analyzing-dns-logs-for-exfiltration

mukul975/Anthropic-Cybersecurity-Skills

Analyzes DNS query logs in SIEM tools to surface tunneling, DGA domains, and covert C2 traffic through entropy, query-volume, and subdomain-length heuristics for SOC investigations.

PowerShell Empire Artifact Detection

analyzing-powershell-empire-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows event logs for PowerShell Empire artifacts such as default launcher strings, Base64 stagers, known module invocations, and staging URLs to support threat hunting and detection tuning.

Ransomware Network Indicators

analyzing-ransomware-network-indicators

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek conn.log and NetFlow data to surface ransomware network indicators such as C2 beaconing, TOR exit node connections, high-volume exfiltration flows, and risky DNS patterns, then score risks for incident response and detection tuning.

Zeek Beaconing Detection

detecting-beaconing-patterns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Zeek conn.log intervals with ZAT to compute jitter metrics and flag low-variance periodic connections, helping SOC analysts hunt for command-and-control callbacks and validate monitoring coverage.

Mobile Malware Behavior Detection

detecting-mobile-malware-behavior

mukul975/Anthropic-Cybersecurity-Skills

Detects and analyzes malicious behavior in Android and iOS apps through static, MobSF, Frida, and network monitoring workflows, helping analysts triage suspicious builds, hunt indicators, and validate exfiltration or C2 signals during incident response.

Command and Control Beaconing Detection

hunting-for-command-and-control-beaconing

mukul975/Anthropic-Cybersecurity-Skills

Detects command-and-control beaconing in network telemetry via frequency/jitter analysis, reputation checks, and endpoint context so hunters can spotlight compromised hosts and guide response workflows.

Zeek DNS Tunnel Detection

hunting-for-dns-tunneling-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek dns.log for long queries, high-entropy subdomains, unusual record types, and query volumes to detect DNS tunneling and covert data exfiltration before it reaches other channels.

Ghidra Malware Reverse Engineering

reverse-engineering-malware-with-ghidra

mukul975/Anthropic-Cybersecurity-Skills

Reverse engineer malware binaries with Ghidra to decipher C2 protocols, cryptographic routines, and obfuscation, enabling analysts to extract embedded configs, map command dispatchers, and craft detection rules.

Detect DCOM Lateral Movement

hunting-for-dcom-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detects DCOM lateral movement by triangulating Sysmon Event ID 1/3, Windows security logs, and RPC traffic patterns tied to MMC20, ShellWindows, and ShellBrowserWindow abuse, enabling SOCs to hunt and tune detections across AD domains.

1

Language