Download

Skill UI

Browse and discover 7043+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search CTI , found 2637 results

Default Newest Most Downloaded

Industrial Control Anomaly Detection

detecting-anomalies-in-industrial-control-systems

mukul975/Anthropic-Cybersecurity-Skills

Deploys machine-learning anomaly detection for OT environments by modeling SCADA polling behaviors, profiling Modbus/DNP3/OPC UA traffic, and correlating network anomalies with historian process data to spot rogue devices and unusual process deviations.

Anomalous Authentication Detection

detecting-anomalous-authentication-patterns

mukul975/Anthropic-Cybersecurity-Skills

Detects anomalous authentication patterns across identity logs by combining UEBA, statistical baselines, geo intelligence, and machine learning to flag impossible travel, brute-force, credential stuffing, and other compromised account behaviors for SOC or IAM teams.

Historian Attack Detection

detecting-attacks-on-historian-servers

mukul975/Anthropic-Cybersecurity-Skills

Monitors OT historian servers (OSIsoft PI, Ignition, Wonderware) for unauthorized queries, data manipulation, and lateral movement so analysts catch attacks at the IT/OT boundary, validate data integrity after incidents, and respond to historian-specific CVEs.

Detecting SCADA Attacks

detecting-attacks-on-scada-systems

mukul975/Anthropic-Cybersecurity-Skills

Detects cyber attacks against SCADA systems by analyzing industrial protocols, OT-focused IDS telemetry, and historian anomalies to highlight MITM, PLC injection, HMI compromise, and DoS threats that evade traditional IT tools.

Detect AWS Credential Exposure

detecting-aws-credential-exposure-with-trufflehog

mukul975/Anthropic-Cybersecurity-Skills

Detect exposed AWS credentials across repositories, CI/CD pipelines, and configuration files with TruffleHog, git-secrets, and AWS-native checks to block leaked secrets before deployment and accelerate response.

AWS GuardDuty Findings Automation

detecting-aws-guardduty-findings-automation

mukul975/Anthropic-Cybersecurity-Skills

Automates AWS GuardDuty finding handling by tying EventBridge rules to Lambda responders, enabling real-time quarantine, forensic capture, and notification workflows so SOC teams can cut response time from hours to seconds.

AWS IAM Escalation Detection

detecting-aws-iam-privilege-escalation

mukul975/Anthropic-Cybersecurity-Skills

Uses boto3 plus Cloudsplaining-style policy analysis to detect AWS IAM privilege escalation paths, highlight dangerous permission combinations, and deliver structured remediation guidance for SOC and security teams.

Zeek Beaconing Detection

detecting-beaconing-patterns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Zeek conn.log intervals with ZAT to compute jitter metrics and flag low-variance periodic connections, helping SOC analysts hunt for command-and-control callbacks and validate monitoring coverage.

Detect Broken Object Property Authorization

detecting-broken-object-property-level-authorization

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC analysts and testers through detecting OWASP API3:2023 Broken Object Property Level Authorization vulnerabilities, covering excessive data exposure and mass assignment checks for API endpoints and automated scripts.

Cloud Cryptomining Detection

detecting-cloud-cryptomining-activity

mukul975/Anthropic-Cybersecurity-Skills

Detect unauthorized crypto-mining in AWS, Azure, and GCP by correlating GuardDuty/Defender/SCC findings, compute anomalies, network flows, and container/serverless behaviors to validate threats and guide response.

GuardDuty Cloud Threats

detecting-cloud-threats-with-guardduty

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through deploying and automating Amazon GuardDuty across AWS accounts, enabling advanced protection plans, interpreting severity levels, and triggering EventBridge/Lambda incident response playbooks for EC2, EKS, Lambda, and S3 workloads.

Detect Compromised Cloud Credentials

detecting-compromised-cloud-credentials

mukul975/Anthropic-Cybersecurity-Skills

Detect compromised AWS, Azure, and GCP credentials by correlating GuardDuty, Defender for Identity, and SCC Event Threat Detection findings with abnormal API activity, impossible travel, and credential abuse indicators for triage and incident response.

Prev 1 2 3...171 172 173174175 176 177...218 219 220 Next

Language