Download

Skill UI

Browse and discover 6170+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search IOC , found 29 results

Default Newest Most Downloaded

IOC Enrichment Workflow

analyzing-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Enriches IOCs (IPs, domains, hashes, URLs, emails) via VirusTotal, AbuseIPDB, MalwareBazaar, MISP and STIX pipelines to rate confidence, attribute campaigns, and guide block/monitor decisions.

Analyzing Malicious URLs with URLScan

analyzing-malicious-url-with-urlscan

mukul975/Anthropic-Cybersecurity-Skills

Guide for SOC analysts to submit suspicious links to URLScan.io, review rendered screenshots/dom/network logs, extract IOCs, and cross-reference with threat intelligence sources for phishing and credential harvesting investigations.

Analyze Malware With Cuckoo

analyzing-malware-behavior-with-cuckoo-sandbox

mukul975/Anthropic-Cybersecurity-Skills

Run suspicious binaries inside Cuckoo Sandbox to capture process trees, file and registry changes, network traffic, and API calls, then produce behavioral reports and IOCs for malware classification and automation workflows.

Network Incident Traffic Analysis

analyzing-network-traffic-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Analyzes PCAP captures, Zeek logs, and NetFlow flow data to uncover command-and-control, lateral movement, and exfiltration during security incidents; supports packet-level validation and IOC extraction for triage and response teams.

MISP Threat Landscape Analysis

analyzing-threat-landscape-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Use PyMISP to query MISP event stats, attribute distributions, galaxy clusters, tag trends, and IOC timelines to produce a comprehensive threat landscape report that supports SOC hunting and coverage validation.

Automated IOC Enrichment

automating-ioc-enrichment

mukul975/Anthropic-Cybersecurity-Skills

Automates IOC enrichment by orchestrating multi-source threat intelligence via SOAR playbooks or Python pipelines so SIEM alerts, email submissions, and bulk feeds pre-populate analyst context with VirusTotal, Shodan, MISP, AbuseIPDB, and TIP data.

Automated Malware Pipeline

building-automated-malware-submission-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Creates a scalable SOC workflow to collect suspicious files from endpoints and mail gateways, enrich them with hash lookups, submit to sandboxes/multi-engine scanners, and emit verdicts with IOCs for automated triage and SIEM integration.

IOC Defanging Sharing Pipeline

building-ioc-defanging-and-sharing-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion of IOC sources, normalizes and deduplicates values, defangs risky URLs/IPs/domains/emails, builds STIX 2.1 indicators, and dispatches them to TAXII servers, MISP instances, or email so analysts can safely share threat intel.

OpenCTI IOC Enrichment

building-ioc-enrichment-pipeline-with-opencti

mukul975/Anthropic-Cybersecurity-Skills

Automates building an IOC enrichment pipeline on OpenCTI by deploying connectors such as VirusTotal, Shodan, AbuseIPDB, and GreyNoise to add context, confidence scoring, and threat actor/campaign correlation for analysts.

Phishing Reporting Workflow

building-phishing-reporting-button-workflow

mukul975/Anthropic-Cybersecurity-Skills

Implements the built-in phishing report button and SOAR-driven triage pipeline so suspicious emails are auto-classified, IOCs extracted, remediation actions taken, and reporters thanked.

MISP Threat Feed Aggregation

building-threat-feed-aggregation-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Deploy MISP via Docker to aggregate, correlate, and share threat intelligence feeds from OSINT, commercial, and community sources, enabling centralized IOC management and automated SIEM/SOAR integrations.

Threat Intelligence Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion, normalization, scoring, and distribution of STIX/TAXII and open-source threat feeds so SOCs can match IOCs in real time across SIEM and detection tools.

Language