Download

Skill UI

Browse and discover 6283+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search IOC , found 34 results

Default Newest Most Downloaded

Incident Response Dashboard

building-incident-response-dashboard

mukul975/Anthropic-Cybersecurity-Skills

Creates real-time incident response dashboards in Splunk, Elastic, or Grafana so SOC analysts and leadership get unified situational awareness, containment tracking, IOC spread, and response timelines during active incidents and post-incident reviews.

IOC Defang Sharing Pipeline

building-ioc-defanging-and-sharing-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Automates ingesting raw IOCs, normalizing and defanging them, converting into STIX 2.1 indicators, and distributing via TAXII/MISP/email so analysts can safely share threat data.

OpenCTI IOC Enrichment

building-ioc-enrichment-pipeline-with-opencti

mukul975/Anthropic-Cybersecurity-Skills

Automates an IOC enrichment pipeline in OpenCTI, wiring connectors like VirusTotal, Shodan, AbuseIPDB and GreyNoise to score and contextually label new indicators for analyst prioritization in threat intelligence operations.

Phishing Reporting Automation

building-phishing-reporting-button-workflow

mukul975/Anthropic-Cybersecurity-Skills

Automates phishing reporting by enabling email-client report buttons, routing submissions to a SOAR-powered triage pipeline, extracting IOCs, and triggering remediation/feedback actions for reported threats.

MISP Threat Feed Aggregation

building-threat-feed-aggregation-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Deploy MISP via Docker and PyMISP to aggregate, correlate, and distribute threat intelligence feeds, sync OSINT sources, and feed SIEM/SOAR platforms for centralized IOC management.

Threat Intelligence Enrichment Splunk

building-threat-intelligence-enrichment-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Automate threat intelligence enrichment using Splunk Enterprise Security’s TI framework, ingesting feeds via modular inputs, normalizing IOCs in KV-store collections, and correlating events through lookup-driven searches to give SOC analysts richer context and faster response cues.

Threat Intelligence Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion of STIX/TAXII and open-source threat feeds into SIEM and detection platforms, normalizing, deduplicating, and scoring IOCs so SOC teams can match indicators in real time.

Collecting IOCs

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Systematically gather, enrich, score, and share indicators of compromise (IOCs) from network, host, email, and behavioral evidence to support incident response, detection tuning, and intelligence dissemination using STIX/TAXII and threat platforms.

Collect Threat Intelligence With MISP

collecting-threat-intelligence-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Deploys MISP, configures built-in and custom feeds, and uses the PyMISP API to query, export, and automate IOC collection so security teams can aggregate threat intelligence from community and commercial sources.

Malware IOC Extraction

extracting-iocs-from-malware-samples

mukul975/Anthropic-Cybersecurity-Skills

Extracts file, network, host, and PCAP-derived indicators from analyzed malware samples to populate blocklists, detection content, and shared threat intelligence feeds.

Living Off-the-Land Hunting

hunting-for-living-off-the-land-binaries

mukul975/Anthropic-Cybersecurity-Skills

Proactive threat-hunting workflow that tracks living-off-the-land binaries through EDR/SIEM telemetry, defines hypotheses, baselines normal use, correlates anomalies, and documents detections for defense evasion coverage.

SOAR Automation With Phantom

implementing-soar-automation-with-phantom

mukul975/Anthropic-Cybersecurity-Skills

Automates SOC alert triage, IOC enrichment, containment, and incident response playbooks through Splunk SOAR (Phantom) workflows, letting teams reduce manual work, enforce analyst reviews, and orchestrate tool integrations for consistent, faster response.

Language