Download

Skill UI

Browse and discover 6170+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Lateral Movement , found 27 results

Default Newest Most Downloaded

Constrained Delegation Abuse

exploiting-constrained-delegation-abuse

mukul975/Anthropic-Cybersecurity-Skills

Explains how to abuse Kerberos constrained delegation misconfigurations in Active Directory to impersonate privileged accounts via S4U2self/S4U2proxy, secure service tickets, and access CIFS/LDAP/HTTP targets for lateral movement and privilege escalation during red-team or authorized security exercises.

SMB Exploitation Playbook

exploiting-smb-vulnerabilities-with-metasploit

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized testers through SMB-focused assessments with Metasploit and complementary tools, covering enumeration, vulnerability scanning, EternalBlue exploitation, relay attacks, pass-the-hash lateral movement, and post-exploitation clean-up.

Windows Event Log Forensics

extracting-windows-event-logs-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract, parse, and analyze EVTX files with Chainsaw, Hayabusa, and EvtxECmd to uncover lateral movement, persistence, and privilege escalation during incident response and forensic investigations.

Network Deception Honeypots

implementing-network-deception-with-honeypots

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying and managing OpenCanary, Cowrie, and T-Pot honeypots to detect lateral movement, alert on unauthorized scanning, capture attacker commands, and feed SIEMs, with planning, configuration, monitoring, and maintenance steps.

Firewall Zone Network Segmentation

implementing-network-segmentation-with-firewall-zones

mukul975/Anthropic-Cybersecurity-Skills

Designs and implements layered network segmentation via firewall zones, VLANs, ACLs, and microsegmentation, giving security teams a blueprint for restricting lateral movement, meeting compliance, and hardening east-west traffic.

APT SIEM Correlation Rules

implementing-siem-correlation-rules-for-apt

mukul975/Anthropic-Cybersecurity-Skills

Creates Splunk/Sigma multi-event correlation rules that link Windows authentication, process execution, and network logs to expose APT lateral movement chains missed by single-event detections.

Cloud Incident Containment

performing-cloud-incident-containment-procedures

mukul975/Anthropic-Cybersecurity-Skills

Guides cloud-native incident containment across AWS, Azure, and GCP by isolating compromised resources, revoking credentials, capturing evidence, and tightening network controls to prevent lateral movement while supporting scripted and manual response workflows.

LaZagne Credential Harvesting

performing-credential-access-with-lazagne

mukul975/Anthropic-Cybersecurity-Skills

Guides red teamers through deploying LaZagne on Windows, Linux, and macOS endpoints to extract stored credentials from browsers, databases, system stores, and applications, giving actionable intelligence for lateral movement and privilege escalation during authorized assessments.

Lateral Movement Detection

performing-lateral-movement-detection

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement techniques such as Pass-the-Hash, PsExec, WMI, RDP, and SMB pivots through SIEM correlation of Windows event logs, network flows, and endpoint telemetry aligned with MITRE ATT&CK TA0008 for SOC response and investigation.

WMIExec Lateral Movement

performing-lateral-movement-with-wmiexec

mukul975/Anthropic-Cybersecurity-Skills

Guide demonstrating stealthy lateral movement across Windows networks using Impacket wmiexec.py, CrackMapExec, and native WMI/PowerShell commands during authorized red team assessments and post-exploitation scenarios.

Active Directory Honeytoken Deployment

deploying-active-directory-honeytokens

mukul975/Anthropic-Cybersecurity-Skills

Deploy deception-based honeytokens across Active Directory by creating fake privileged accounts, SPNs, GPOs, and BloodHound paths to detect Kerberoasting, credential theft, lateral movement, and reconnaissance via monitored Windows Security events.

Zeek Lateral Movement Detection

detecting-lateral-movement-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek network logs like conn.log and SMB/NTLM traces to surface lateral movement techniques such as SMB admin share access, DCE/RPC remote service execution, NTLM account spray, Kerberos anomalies, and large internal data transfers so defenders can hunt and alert on spreading compromise.

Language