Download

Skill UI

Browse and discover 6201+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search IOC , found 27 results

Default Newest Most Downloaded

IOC Enrichment Workflow

analyzing-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Enriches IOCs (IPs, domains, hashes, URLs, emails) via VirusTotal, AbuseIPDB, MalwareBazaar, MISP and STIX pipelines to rate confidence, attribute campaigns, and guide block/monitor decisions.

Analyzing Malicious URLs with URLScan

analyzing-malicious-url-with-urlscan

mukul975/Anthropic-Cybersecurity-Skills

Guide for SOC analysts to submit suspicious links to URLScan.io, review rendered screenshots/dom/network logs, extract IOCs, and cross-reference with threat intelligence sources for phishing and credential harvesting investigations.

Analyze Malware With Cuckoo

analyzing-malware-behavior-with-cuckoo-sandbox

mukul975/Anthropic-Cybersecurity-Skills

Run suspicious binaries inside Cuckoo Sandbox to capture process trees, file and registry changes, network traffic, and API calls, then produce behavioral reports and IOCs for malware classification and automation workflows.

MISP Threat Landscape Analysis

analyzing-threat-landscape-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Use PyMISP to query MISP event stats, attribute distributions, galaxy clusters, tag trends, and IOC timelines to produce a comprehensive threat landscape report that supports SOC hunting and coverage validation.

Automated IOC Enrichment

automating-ioc-enrichment

mukul975/Anthropic-Cybersecurity-Skills

Automates IOC enrichment by orchestrating multi-source threat intelligence via SOAR playbooks or Python pipelines so SIEM alerts, email submissions, and bulk feeds pre-populate analyst context with VirusTotal, Shodan, MISP, AbuseIPDB, and TIP data.

Automated Malware Pipeline

building-automated-malware-submission-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Creates a scalable SOC workflow to collect suspicious files from endpoints and mail gateways, enrich them with hash lookups, submit to sandboxes/multi-engine scanners, and emit verdicts with IOCs for automated triage and SIEM integration.

IOC Defanging Sharing Pipeline

building-ioc-defanging-and-sharing-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion of IOC sources, normalizes and deduplicates values, defangs risky URLs/IPs/domains/emails, builds STIX 2.1 indicators, and dispatches them to TAXII servers, MISP instances, or email so analysts can safely share threat intel.

OpenCTI IOC Enrichment

building-ioc-enrichment-pipeline-with-opencti

mukul975/Anthropic-Cybersecurity-Skills

Automates building an IOC enrichment pipeline on OpenCTI by deploying connectors such as VirusTotal, Shodan, AbuseIPDB, and GreyNoise to add context, confidence scoring, and threat actor/campaign correlation for analysts.

MISP Threat Feed Aggregation

building-threat-feed-aggregation-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Deploy MISP via Docker to aggregate, correlate, and share threat intelligence feeds from OSINT, commercial, and community sources, enabling centralized IOC management and automated SIEM/SOAR integrations.

Threat Intelligence Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion, normalization, scoring, and distribution of STIX/TAXII and open-source threat feeds so SOCs can match IOCs in real time across SIEM and detection tools.

IOC Collection Workflow

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Collects and enriches indicators of compromise across network, host, email, and behavioral sources, formats them as STIX/TAXII, and distributes to security tools and partners for detection, blocking, and intelligence sharing during and after incidents.

MISP Threat Intelligence Pipeline

collecting-threat-intelligence-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Guide for deploying MISP, configuring community and custom feeds, using PyMISP for scripted searches, and exporting validated IOCs in STIX/TAXII, Suricata, or CSV formats to automate threat intelligence ingestion.

Language