Download

Skill UI

Browse and discover 6489+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search CTI , found 2398 results

Default Newest Most Downloaded

GuardDuty Findings Automation

detecting-aws-guardduty-findings-automation

mukul975/Anthropic-Cybersecurity-Skills

Automates AWS GuardDuty findings by linking EventBridge rules to Lambda responders, quarantining EC2 instances, tagging resources, snapshotting volumes, and notifying teams for real-time incident handling.

Detect AWS IAM Escalation

detecting-aws-iam-privilege-escalation

mukul975/Anthropic-Cybersecurity-Skills

Detect AWS IAM privilege escalation paths with boto3 and Cloudsplaining-style policy analysis to flag dangerous permission combos, wildcard resources, and least-privilege violations for SOC hunting or monitoring validation.

Detect Azure Lateral Movement

detecting-azure-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detect Azure AD lateral movement by correlating Microsoft Graph audit logs, Sentinel KQL analytics, and sign-in anomalies to spot service principal abuse, stolen tokens, and cross-tenant pivots, then report indicators and containment steps.

Detect Azure Service Principal Abuse

detecting-azure-service-principal-abuse

mukul975/Anthropic-Cybersecurity-Skills

Provides detection workflows, queries, and investigation steps for spotting Azure service principal abuse in Microsoft Entra ID environments, covering credential updates, privileged role assignments, admin consent bypass, enumeration, and OAuth permission escalation via Sentinel or Splunk.

Azure Storage Misconfigurations Audit

detecting-azure-storage-account-misconfigurations

mukul975/Anthropic-Cybersecurity-Skills

Audits Azure Blob and ADLS storage accounts using the azure-mgmt-storage Python SDK to detect public access exposure, weak SAS tokens, missing encryption, disabled HTTPS, TLS downgrades, and risky network rules, then produces severity-ranked reports for SOC teams.

Zeek Beaconing Detection

detecting-beaconing-patterns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Zeek conn.log data with ZAT and Pandas to compute inter-arrival time statistics, flagging low-jitter periodic connections as potential C2 beaconing when hunting command-and-control callbacks.

Cloud Cryptomining Detection

detecting-cloud-cryptomining-activity

mukul975/Anthropic-Cybersecurity-Skills

Detect unauthorized crypto-mining in AWS, Azure, and GCP by correlating GuardDuty/Defender/SCC findings, compute anomalies, network flows, and container/serverless behaviors to validate threats and guide response.

GuardDuty Cloud Threat Detection

detecting-cloud-threats-with-guardduty

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through deploying GuardDuty across AWS, enabling protection plans for S3, EKS, EC2 runtime, and Lambda, interpreting finding severities, and wiring EventBridge plus Lambda responses for automated containment.

Cloud Credential Threat Detection

detecting-compromised-cloud-credentials

mukul975/Anthropic-Cybersecurity-Skills

Detect compromised AWS, Azure, and GCP credentials by analyzing GuardDuty, Defender, and SCC insights along with logs to surface anomalous API use, impossible travel, and credential abuse indicators during investigations.

Runtime Container Drift Detection

detecting-container-drift-at-runtime

mukul975/Anthropic-Cybersecurity-Skills

Monitor running containers for unauthorized binaries, filesystem changes, configuration drift, and package installs to catch compromises early and validate runtime security posture.

Container Escape Detection

detecting-container-escape-attempts

mukul975/Anthropic-Cybersecurity-Skills

Detects container escape attempts by monitoring syscall, file, process, network, and audit indicators with runtime tools like Falco, Sysdig, and custom rules to alert on privileged mounts, Docker socket access, sensitive proc paths, cgroup writes, and kernel module loading.

Falco Container Escape Detection

detecting-container-escape-with-falco-rules

mukul975/Anthropic-Cybersecurity-Skills

Use Falco runtime rules to detect container escape techniques by monitoring syscalls, file accesses, and privilege escalations, helping SOC analysts validate monitoring coverage and hunt threats across Kubernetes or Docker hosts.

Prev 1 2 3...168 169 170171172 173 174...198 199 200 Next

Language