Download

Skill UI

Browse and discover 6218+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search IOCs , found 14 results

Default Newest Most Downloaded

IOC Enrichment Workflow

analyzing-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Enriches IOCs (IPs, domains, hashes, URLs, emails) via VirusTotal, AbuseIPDB, MalwareBazaar, MISP and STIX pipelines to rate confidence, attribute campaigns, and guide block/monitor decisions.

Analyzing Malicious URLs with URLScan

analyzing-malicious-url-with-urlscan

mukul975/Anthropic-Cybersecurity-Skills

Guide for SOC analysts to submit suspicious links to URLScan.io, review rendered screenshots/dom/network logs, extract IOCs, and cross-reference with threat intelligence sources for phishing and credential harvesting investigations.

Analyze Malware With Cuckoo

analyzing-malware-behavior-with-cuckoo-sandbox

mukul975/Anthropic-Cybersecurity-Skills

Run suspicious binaries inside Cuckoo Sandbox to capture process trees, file and registry changes, network traffic, and API calls, then produce behavioral reports and IOCs for malware classification and automation workflows.

Automated Malware Pipeline

building-automated-malware-submission-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Creates a scalable SOC workflow to collect suspicious files from endpoints and mail gateways, enrich them with hash lookups, submit to sandboxes/multi-engine scanners, and emit verdicts with IOCs for automated triage and SIEM integration.

Threat Intelligence Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion, normalization, scoring, and distribution of STIX/TAXII and open-source threat feeds so SOCs can match IOCs in real time across SIEM and detection tools.

MISP Threat Intelligence Pipeline

collecting-threat-intelligence-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Guide for deploying MISP, configuring community and custom feeds, using PyMISP for scripted searches, and exporting validated IOCs in STIX/TAXII, Suricata, or CSV formats to automate threat intelligence ingestion.

Threat Campaign Correlation

correlating-threat-campaigns

mukul975/Anthropic-Cybersecurity-Skills

Correlates disparate incidents, IOCs, and adversary behaviors using infrastructure, capability, temporal, and victimology pivots to build campaign graphs and intelligence reports for detection tuning and attribution.

Pass The Hash Detection

detecting-pass-the-hash-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detecting Pass-the-Hash attacks by correlating NTLM Type 3 logons, telemetry from EDR/SIEM, and credential-dumping IOCs to proactively hunt and validate incidents across Windows estates.

Automated Malware Analysis

performing-automated-malware-analysis-with-cape

mukul975/Anthropic-Cybersecurity-Skills

Deploys CAPEv2 sandbox to automatically run malware samples, monitor behavior, dump payloads, parse configurations, and extract IOCs for incident response or proactive security testing.

Indicator Lifecycle Management

performing-indicator-lifecycle-management

mukul975/Anthropic-Cybersecurity-Skills

Tracks IOCs from discovery through validation, enrichment, deployment, monitoring, and retirement; includes processes for quality metrics, confidence decay, false-positive handling, and automated aging to keep indicator databases actionable.

Malware IOC Extraction

performing-malware-ioc-extraction

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware samples to extract hashes, network and registry indicators, embedded strings, and behaviors via PE parsing, sandbox detonations, regex scanning, and formatting results as YARA/STIX IOCs for sharing with CTI teams.

Network Traffic Analysis Automation

performing-network-traffic-analysis-with-tshark

mukul975/Anthropic-Cybersecurity-Skills

Automates packet capture analysis via tshark and pyshark to produce protocol statistics, detect suspicious flows and DNS anomalies, extract IOCs, and summarize findings for incident response or security testing.

Language