Download

Skill UI

Browse and discover 5973+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search DNS , found 32 results

Default Newest Most Downloaded

MitM Attack Simulation

conducting-man-in-the-middle-attack-simulation

mukul975/Anthropic-Cybersecurity-Skills

Simulates MITM scenarios with Bettercap, Ettercap, and mitmproxy in authorized lab settings to validate TLS enforcement, DNS/ARP spoofing detection, credential interception, and defender response workflows through controlled traffic manipulation.

DNS Exfiltration Detection

detecting-dns-exfiltration-with-dns-query-analysis

mukul975/Anthropic-Cybersecurity-Skills

Detects DNS tunneling exfiltration by analyzing passive DNS logs for anomalous query entropy, volumes, subdomain length, TXT abuse, and response payloads with statistical and ML techniques to alert on covert data leakage.

Zeek DNS Exfiltration Detection

detecting-exfiltration-over-dns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Zeek dns.log data to spot DNS-based exfiltration by measuring entropy, label length, subdomain volume, and query rates, then scores and reports suspicious domains for incident response.

Zeek Network Anomaly Detection

detecting-network-anomalies-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Deploys Zeek to passively monitor network traffic, emit structured connection/DNS/HTTP/SSL logs, and run custom scripts that flag anomalous behavior for threat hunting and incident response teams.

DNS Persistence Hunting

hunting-for-dns-based-persistence

mukul975/Anthropic-Cybersecurity-Skills

Hunt DNS persistence by exporting zone baselines, querying SecurityTrails passive history, and auditing provider logs to spot hijacks, dangling records, and unauthorized delegations.

Zeek DNS Tunneling Hunt

hunting-for-dns-tunneling-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Detect DNS tunneling data exfiltration by analyzing Zeek dns.log for high-entropy subdomains, long queries, unusual record types, and elevated volume, correlating with connection metadata and threat intelligence.

Canarytoken Deception Detection

implementing-deception-based-detection-with-canarytoken

mukul975/Anthropic-Cybersecurity-Skills

Automates Canary Tokens creation and monitoring via the Thinkst Canary API to deploy web, DNS, document, and AWS key tripwires, track alerts, and produce deception coverage reports for breach detection.

Email Authentication Audit

implementing-email-security-with-dmarc-dkim-spf

mukul975/Anthropic-Cybersecurity-Skills

Audits a domain’s email authentication by querying SPF, DKIM, and DMARC DNS records using dnspython, validating syntax/counts, flagging common spoofing risks, and producing remediation guidance.

Honeytoken Breach Detection

implementing-honeytokens-for-breach-detection

mukul975/Anthropic-Cybersecurity-Skills

Deploys honeytokens and canary tokens (fake AWS keys, DNS beacons, documents, DB entries) with webhook alerts to form deception-based early warning systems that detect unauthorized access across critical assets.

Kubernetes Network Policy Implementation

implementing-network-policies-for-kubernetes

mukul975/Anthropic-Cybersecurity-Skills

Guided walkthrough covering Kubernetes NetworkPolicy rules—from default deny through DNS, application, cross-namespace, egress restriction, and metadata protection—plus validation commands for secure cluster traffic control.

Zero Trust DNS Enforcement

implementing-zero-trust-dns-with-nextdns

mukul975/Anthropic-Cybersecurity-Skills

Deploy NextDNS as a zero trust DNS filtering layer that enforces encrypted resolution, blocks threats, and applies organizational policies across endpoints via DoH/DoT configurations and curated allow/deny lists.

API Inventory And Discovery

performing-api-inventory-and-discovery

mukul975/Anthropic-Cybersecurity-Skills

Performs API inventory and discovery via passive traffic analysis, active scans, DNS/JavaScript enumeration, and cloud inventories to catalog documented, undocumented, shadow, zombie, and deprecated endpoints ahead of security assessments or compliance checks.

Language