Download

Skill UI

Browse and discover 6278+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Lateral-Movement , found 24 results

Default Newest Most Downloaded

Active Directory Offense Guide

active-directory-attacks

sickn33/antigravity-awesome-skills

Provides offensive operators with a full Active Directory attack playbook covering reconnaissance, credential harvesting, Kerberos abuses, lateral movement, privilege escalation, and persistence tools for red team and penetration engagements.

Network Traffic Incident Analysis

analyzing-network-traffic-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Analyzes PCAP, Zeek logs, and NetFlow captures to spot command-and-control beacons, lateral movement, and exfiltration during incidents, guiding packet-level validation and IOC extraction for SOC investigations.

Splunk Detection Rule Crafting

building-detection-rule-with-splunk-spl

mukul975/Anthropic-Cybersecurity-Skills

Guide to building effective Splunk SPL detection rules for SOC analysts, covering threshold, sequence, anomaly, lateral movement, exfiltration, and PowerShell patterns plus the correlation search workflow that turns logs into actionable notable events.

Internal Network Penetration Test

conducting-internal-network-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Guides testers through simulating an insider or post-breach actor on the corporate LAN to detect lateral movement, privilege escalation, credential capture, and data exposure by combining discovery, credential attacks, and exploitation phases.

Pass-the-Ticket Workflow

conducting-pass-the-ticket-attack

mukul975/Anthropic-Cybersecurity-Skills

Guides red-teamers through extracting Kerberos tickets from a compromised host, injecting them into a session, and using them for lateral movement without needing credentials, useful during authorized security assessments and incident simulations.

Zero Trust Microsegmentation

configuring-microsegmentation-for-zero-trust

mukul975/Anthropic-Cybersecurity-Skills

Guide for configuring microsegmentation policies across VMware NSX, Illumio, Calico, and related platforms to enforce least-privilege workload-to-workload access and block lateral movement in zero trust environments.

Active Breach Containment

containing-active-breach

mukul975/Anthropic-Cybersecurity-Skills

Guides incident responders through assessing, containing, and validating active breaches using network segmentation, credential revocation, and endpoint isolation to stop lateral movement during live intrusions.

Historian Server Attack Detection

detecting-attacks-on-historian-servers

mukul975/Anthropic-Cybersecurity-Skills

Monitors OT historian servers (OSIsoft PI, Ignition, Wonderware) that bridge IT/OT networks to catch unauthorized queries, lateral movement, data tampering, and historian-specific exploits before they pivot across domains.

Detect Azure Lateral Movement

detecting-azure-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detect Azure AD lateral movement by correlating Microsoft Graph audit logs, Sentinel KQL analytics, and sign-in anomalies to spot service principal abuse, stolen tokens, and cross-tenant pivots, then report indicators and containment steps.

Lateral Movement Detection

detecting-lateral-movement-in-network

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement across enterprise networks by correlating Windows security logs, Zeek flow/SMB traces, and SIEM rules to flag Pass-the-Hash, PsExec, and RDP pivots during incident response and hunting.

Stuxnet Style Detection

detecting-stuxnet-style-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detects Stuxnet-style cyber-physical campaigns by monitoring PLC logic integrity, physics-based process anomalies, engineering workstation compromise, USB-borne entry, and IT-to-OT lateral movement to surface subtle ICS manipulations.

EDR Credential Dump Detection

detecting-t1003-credential-dumping-with-edr

mukul975/Anthropic-Cybersecurity-Skills

Uses EDR telemetry, Sysmon and Defender logs to detect T1003 credential dumping targeting LSASS memory, SAM, NTDS, cached credentials, and DCSync activity, helping hunters map suspicious access, lateral movement, and impacted accounts.

Language