Download

Skill UI

Browse and discover 6557+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Intelligence , found 46 results

Default Newest Most Downloaded

Collecting IOCs

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Systematically gather, enrich, score, and share indicators of compromise (IOCs) from network, host, email, and behavioral evidence to support incident response, detection tuning, and intelligence dissemination using STIX/TAXII and threat platforms.

Collect Threat Intelligence With MISP

collecting-threat-intelligence-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Deploys MISP, configures built-in and custom feeds, and uses the PyMISP API to query, export, and automate IOC collection so security teams can aggregate threat intelligence from community and commercial sources.

Email Forwarding Detection

detecting-email-forwarding-rules-attack

mukul975/Anthropic-Cybersecurity-Skills

Detect suspicious email forwarding rules that attackers use to maintain persistence and steal intelligence; guides analysts through hypothesis, data sourcing, multi-tool querying, and validation to hunt BEC and related threats.

Insider Threat Detection

detecting-insider-threat-behaviors

mukul975/Anthropic-Cybersecurity-Skills

Proactively hunts for insider threat indicators by correlating SIEM and EDR telemetry, validating hypotheses from threat intelligence, and documenting detection findings to guide response during campaigns that feature unauthorized data access, privilege abuse, or resignation-related exfiltration.

Privilege Escalation Detection

detecting-privilege-escalation-attempts

mukul975/Anthropic-Cybersecurity-Skills

Provides a structured hunt process for detecting privilege escalation attempts on Windows and Linux by aligning hypotheses, telemetry selection, query execution, and validation across EDR, SIEM, and threat intelligence sources.

Malware IOC Extraction

extracting-iocs-from-malware-samples

mukul975/Anthropic-Cybersecurity-Skills

Extracts file, network, host, and PCAP-derived indicators from analyzed malware samples to populate blocklists, detection content, and shared threat intelligence feeds.

Diamond Intrusion Analysis

implementing-diamond-model-analysis

mukul975/Anthropic-Cybersecurity-Skills

Implements the Diamond Model of Intrusion Analysis in Python to classify and correlate adversary, capability, infrastructure, and victim data, build activity threads, identify pivots, and generate ready-to-use intelligence for SOCs.

STIX 2.1 Threat Sharing

implementing-security-information-sharing-with-stix2

mukul975/Anthropic-Cybersecurity-Skills

Use the stix2 Python library to craft, validate, and bundle STIX 2.1 SDOs/SROs, enrich indicators with malware and campaign context, and publish via TAXII 2.1 so SIEMs and SOARs can consume shared intelligence.

STIX TAXII Feed Integration

implementing-stix-taxii-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Implements STIX/TAXII 2.1 feed consumer and producer flows in Python, covering server discovery, collection polling, STIX parsing, and SIEM/TIP integration for cyber threat intelligence deployments.

OpenTAXII TAXII Server

implementing-taxii-server-with-opentaxii

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure an OpenTAXII TAXII 2.1 server to share STIX 2.1 threat intelligence, define collections, publish bundles, and integrate with SIEM/SOAR tools for automated indicator exchange and compliance-ready security architecture.

Threat Intelligence Lifecycle

implementing-threat-intelligence-lifecycle-management

mukul975/Anthropic-Cybersecurity-Skills

Implements a structured threat intelligence lifecycle that guides planning, collection, processing, analysis, dissemination, and feedback to turn raw cyber data into actionable intelligence for SOCs, CTI programs, and compliance teams.

MISP Threat Intelligence

implementing-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Build a PyMISP-driven threat intelligence platform that ingests multiple IOC feeds, tags MITRE ATT&CK techniques, enriches data via VirusTotal and AbuseIPDB, and exports STIX 2.1 bundles for SIEM pipelines.

Prev 1 234 Next

Language