Download

Skill UI

Browse and discover 6218+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Indicator , found 29 results

Default Newest Most Downloaded

IOC Collection Workflow

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Collects and enriches indicators of compromise across network, host, email, and behavioral sources, formats them as STIX/TAXII, and distributes to security tools and partners for detection, blocking, and intelligence sharing during and after incidents.

Compromised Cloud Credentials Detection

detecting-compromised-cloud-credentials

mukul975/Anthropic-Cybersecurity-Skills

Detect compromised AWS, Azure, and GCP credentials by analyzing GuardDuty, Defender for Identity, and SCC alerts alongside log anomalies, impossible travel, and unauthorized provisioning indicators for rapid incident response.

Endpoint Fileless Attack Detection

detecting-fileless-attacks-on-endpoints

mukul975/Anthropic-Cybersecurity-Skills

Guides building telemetry-backed detections for fileless attacks on Windows endpoints, covering PowerShell logging, Sysmon events, WMI/registry persistence, injection indicators, and query examples for EDR or SIEM hunts.

Mimikatz Execution Detection

detecting-mimikatz-execution-patterns

mukul975/Anthropic-Cybersecurity-Skills

Detect execution patterns of Mimikatz by correlating command-line signatures, LSASS access anomalies, binary indicators, and in-memory modules across EDR and SIEM telemetry, supporting proactive threat hunting and incident response.

Ransomware Network Precursors Detection

detecting-ransomware-precursors-in-network

mukul975/Anthropic-Cybersecurity-Skills

Identifies early-stage ransomware indicators in Zeek/Suricata/Arkime traffic, correlates with SIEM rules and threat feeds, and alerts on Cobalt Strike beacons, Mimikatz signatures, RDP brute-force and staging behaviors before encryption begins.

EternalBlue Exploitation Guide

exploiting-ms17-010-eternalblue-vulnerability

mukul975/Anthropic-Cybersecurity-Skills

Provides a structured workflow for scanning, exploiting, and post-exploitation when safely testing MS17-010 EternalBlue in authorized engagements, including detection indicators and required tooling for proof-of-concept campaigns.

Spearphishing Threat Hunt

hunting-for-spearphishing-indicators

mukul975/Anthropic-Cybersecurity-Skills

Guide on hunting spearphishing indicators across email logs, endpoint telemetry, and network data with workflows, tools, scenarios, and output formats for proactive campaign detection and response.

Hunt Unusual Service Installs

hunting-for-unusual-service-installations

mukul975/Anthropic-Cybersecurity-Skills

Detect suspicious Windows service installations by parsing System event logs for Event ID 7045, analyzing service binaries and paths, and highlighting persistence indicators tied to MITRE ATT&CK T1543.003 for focused SOC response.

STIX 2.1 Threat Sharing

implementing-security-information-sharing-with-stix2

mukul975/Anthropic-Cybersecurity-Skills

Create, validate, and share STIX 2.1 intelligence objects via the stix2 Python library and TAXII 2.1 transport, covering SDOs, relationships, bundles, and indicators for integrating with MISP, OpenCTI, SIEM, and SOAR pipelines.

Automated SOAR Phishing Playbook

implementing-soar-playbook-for-phishing

mukul975/Anthropic-Cybersecurity-Skills

Automates phishing incident handling by parsing reported emails, creating Splunk SOAR containers and artifacts, and triggering REST-based playbooks to investigate indicators and produce verdict summaries for security teams.

Automating SOAR Playbooks

implementing-soar-playbook-with-palo-alto-xsoar

mukul975/Anthropic-Cybersecurity-Skills

Designs and deploys Palo Alto Cortex XSOAR playbooks to automate phishing incident response, enrich indicators, orchestrate containment commands, and reduce SOC mean time to respond while aligning with compliance needs.

Deploy TAXII Server

implementing-taxii-server-with-opentaxii

mukul975/Anthropic-Cybersecurity-Skills

Use OpenTAXII and TAXII 2.1 to host STIX 2.1 collections, configure access controls, and automate indicator exchange with SIEM/SOAR through a Dockerized Medallion deployment.

Language