Download

Skill UI

Browse and discover 7129+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Domains , found 30 results

Default Newest Most Downloaded

DNS Exfiltration Detection

analyzing-dns-logs-for-exfiltration

mukul975/Anthropic-Cybersecurity-Skills

Analyzes DNS query logs in SIEM tools to surface tunneling, DGA domains, and covert C2 traffic through entropy, query-volume, and subdomain-length heuristics for SOC investigations.

Certificate Transparency Monitoring

analyzing-tls-certificate-transparency-logs

mukul975/Anthropic-Cybersecurity-Skills

Monitors crt.sh certificate transparency logs via pycrtsh to detect phishing domains, unauthorized issuance, typosquatting, and shadow IT, enabling SOC analysts to proactively hunt for suspicious certificates and validate monitoring coverage.

Typosquatting Domain Analysis

analyzing-typosquatting-domains-with-dnstwist

mukul975/Anthropic-Cybersecurity-Skills

Use dnstwist to generate and resolve domain permutations, flagging registered typosquatting, homograph, and impersonation sites so SOC teams can hunt, alert, and request take-downs.

Adversary Infrastructure Tracker

building-adversary-infrastructure-tracking-system

mukul975/Anthropic-Cybersecurity-Skills

Automates discovery and monitoring of threat actor C2 infrastructure by ingesting passive DNS, certificate transparency, WHOIS, and IP enrichment data to build a continuously updated graph of related domains, hosts, and registrars for intelligence or incident response teams.

DNS Exfiltration Detection with Zeek

detecting-exfiltration-over-dns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Zeek dns.log to flag DNS tunneling by computing subdomain entropy, long labels, unique counts and query volumes, scoring domains and emitting structured JSON reports for SOC investigations and monitoring validation.

Broken Link Hijacking

exploiting-broken-link-hijacking

mukul975/Anthropic-Cybersecurity-Skills

Audit web apps for dead external resources, verify claimable domains/cloud assets, and validate broken-link hijacking paths to demonstrate supply-chain and subdomain takeover risks.

Zeek DNS Tunnel Detection

hunting-for-dns-tunneling-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek dns.log for long queries, high-entropy subdomains, unusual record types, and query volumes to detect DNS tunneling and covert data exfiltration before it reaches other channels.

Active Directory Security Audit

performing-active-directory-vulnerability-assessment

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through Active Directory vulnerability assessments with PingCastle health checks, BloodHound attack-path mapping, and Purple Knight scoring to spot misconfigurations, privilege escalation paths, and Kerberos lateral-movement weaknesses in enterprise domains.

DNS Enumeration Zone Transfer

performing-dns-enumeration-and-zone-transfer

mukul975/Anthropic-Cybersecurity-Skills

Walks through authorized reconnaissance to enumerate DNS records, attempt zone transfers, brute-force subdomains, and map infrastructure so you can identify misconfigurations and exposed assets before targeting services or mail servers.

IOC Enrichment Automation

performing-ioc-enrichment-automation

mukul975/Anthropic-Cybersecurity-Skills

Automates IOC enrichment by orchestrating VirusTotal, AbuseIPDB, Shodan, MISP, and other intelligence sources to score IPs, domains, URLs, and hashes during SOC triage or incident analysis.

Malware IOC Extraction Guide

performing-malware-ioc-extraction

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware to extract file hashes, C2 domains, IPs, URLs, registry hits and behavioral artifacts, blending static PE parsing, sandbox detonations, YARA-based IOC spotting, and STIX 2.1 formatting for CTI sharing during assessments or incident response.

Automated SpiderFoot OSINT Profiling

performing-osint-with-spiderfoot

mukul975/Anthropic-Cybersecurity-Skills

Automate OSINT collection via the SpiderFoot REST API and CLI to profile domains, IPs, emails, leaked credentials, and DNS records across 200+ sources, parse structured results, and deliver intelligence reports for security assessments and response.

Language