Download

Skill UI

Browse and discover 6201+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Lateral-Movement , found 26 results

Default Newest Most Downloaded

SMB Exploitation Playbook

exploiting-smb-vulnerabilities-with-metasploit

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized testers through SMB-focused assessments with Metasploit and complementary tools, covering enumeration, vulnerability scanning, EternalBlue exploitation, relay attacks, pass-the-hash lateral movement, and post-exploitation clean-up.

Windows Event Log Forensics

extracting-windows-event-logs-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract, parse, and analyze EVTX files with Chainsaw, Hayabusa, and EvtxECmd to uncover lateral movement, persistence, and privilege escalation during incident response and forensic investigations.

Network Deception Honeypots

implementing-network-deception-with-honeypots

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying and managing OpenCanary, Cowrie, and T-Pot honeypots to detect lateral movement, alert on unauthorized scanning, capture attacker commands, and feed SIEMs, with planning, configuration, monitoring, and maintenance steps.

Firewall Zone Network Segmentation

implementing-network-segmentation-with-firewall-zones

mukul975/Anthropic-Cybersecurity-Skills

Designs and implements layered network segmentation via firewall zones, VLANs, ACLs, and microsegmentation, giving security teams a blueprint for restricting lateral movement, meeting compliance, and hardening east-west traffic.

APT SIEM Correlation Rules

implementing-siem-correlation-rules-for-apt

mukul975/Anthropic-Cybersecurity-Skills

Creates Splunk/Sigma multi-event correlation rules that link Windows authentication, process execution, and network logs to expose APT lateral movement chains missed by single-event detections.

Cloud Incident Containment Playbook

performing-cloud-incident-containment-procedures

mukul975/Anthropic-Cybersecurity-Skills

Describes cloud-native incident containment procedures across AWS, Azure, and GCP to isolate compromised resources, revoke credentials, preserve forensic evidence, and apply security controls before lateral movement occurs.

LaZagne Credential Harvesting

performing-credential-access-with-lazagne

mukul975/Anthropic-Cybersecurity-Skills

Guides red teamers through deploying LaZagne on Windows, Linux, and macOS endpoints to extract stored credentials from browsers, databases, system stores, and applications, giving actionable intelligence for lateral movement and privilege escalation during authorized assessments.

Lateral Movement Detection

performing-lateral-movement-detection

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement techniques such as Pass-the-Hash, PsExec, WMI, RDP, and SMB pivots through SIEM correlation of Windows event logs, network flows, and endpoint telemetry aligned with MITRE ATT&CK TA0008 for SOC response and investigation.

WMIExec Lateral Movement

performing-lateral-movement-with-wmiexec

mukul975/Anthropic-Cybersecurity-Skills

Guide demonstrating stealthy lateral movement across Windows networks using Impacket wmiexec.py, CrackMapExec, and native WMI/PowerShell commands during authorized red team assessments and post-exploitation scenarios.

Active Directory Honeytoken Deployment

deploying-active-directory-honeytokens

mukul975/Anthropic-Cybersecurity-Skills

Deploy deception-based honeytokens across Active Directory by creating fake privileged accounts, SPNs, GPOs, and BloodHound paths to detect Kerberoasting, credential theft, lateral movement, and reconnaissance via monitored Windows Security events.

Zeek Lateral Movement Detection

detecting-lateral-movement-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek network logs like conn.log and SMB/NTLM traces to surface lateral movement techniques such as SMB admin share access, DCE/RPC remote service execution, NTLM account spray, Kerberos anomalies, and large internal data transfers so defenders can hunt and alert on spreading compromise.

Detect DCOM Lateral Movement

hunting-for-dcom-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detects DCOM-based lateral movement via Sysmon event correlation, WMI analysis, and RPC monitoring to flag MMC20.Application, ShellWindows, and ShellBrowserWindow abuse so threat hunters can validate MITRE T1021.003 coverage.

Language