Download

Skill UI

Browse and discover 7087+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Log Hunting , found 30 results

Default Newest Most Downloaded

Red Team Recon Toolkit

sickn33/antigravity-awesome-skills

Centralizes proven red team methodologies into an automated reconnaissance and vulnerability discovery workflow that sequences asset discovery, live host validation, fingerprinting, content hunting, and exploit surface analysis for bug bounty and defensive assessments.

Red Team Recon Methodology

red-team-tools-and-methodology

sickn33/antigravity-awesome-skills

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

Red Team Recon Methodology

red-team-tools-and-methodology

zebbern/claude-code-guide

Provides red team workflows combining subdomain enumeration, live host discovery, technology fingerprinting, XSS hunting, API fuzzing, and automated recon scripting to support bug bounty hunters and security researchers.

Cloud Storage Access Detection

analyzing-cloud-storage-access-patterns

mukul975/Anthropic-Cybersecurity-Skills

Detects abnormal AWS S3, GCS, and Azure Blob access by analyzing data events/logs, building baselines, and spotting after-hours downloads, new IPs, or API spikes for threat hunting.

MFT Deleted File Recovery

analyzing-mft-for-deleted-file-recovery

mukul975/Anthropic-Cybersecurity-Skills

Analyze NTFS Master File Table artifacts with MFTECmd, analyzeMFT, and X-Ways to recover metadata and content of deleted files, leveraging $LogFile, $UsnJrnl, and slack space for incident response or threat hunting.

PowerShell Empire Artifact Detection

analyzing-powershell-empire-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows event logs for PowerShell Empire artifacts such as default launcher strings, Base64 stagers, known module invocations, and staging URLs to support threat hunting and detection tuning.

Cloud SIEM Sentinel Deployment

building-cloud-siem-with-sentinel

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying Microsoft Sentinel as a cloud-native SIEM and SOAR stack, covering multi-cloud data connectors, KQL detection hunting, Logic Apps playbooks, and using the Sentinel data lake to hunt petabyte-scale telemetry from AWS, Azure, and GCP.

Endpoint Evasion Detection

detecting-evasion-techniques-in-endpoint-logs

mukul975/Anthropic-Cybersecurity-Skills

Detect defense-evasion techniques in endpoint logs by identifying log tampering, timestomping, process injection, security-tool disabling, and masquerading; use in threat hunting, detection engineering, or investigations that query telemetry from Sysmon, SIEM, or EDR.

Network Lateral Movement Detection

detecting-lateral-movement-in-network

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement techniques in enterprise networks by correlating authentication logs, SMB/RDP flows, and Zeek/Velociraptor telemetry, enabling SIEM alerts and hunting for pass-the-hash or RDP pivot activity.

Zeek Network Anomaly Detection

detecting-network-anomalies-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Deploy Zeek to passively observe traffic, emit structured logs, and apply bespoke detection scripts for threat hunting, incident response, and monitoring anomalous network behavior.

Pass Hash Attack Detection

detecting-pass-the-hash-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detects Pass-the-Hash attacks by analyzing NTLM logon patterns and correlating credential dumping telemetry via SIEM/EDR hunting, aiding proactive threat hunting, incident response, and purple-team exercises.

Service Account Abuse Detection

detecting-service-account-abuse

mukul975/Anthropic-Cybersecurity-Skills

Structured threat-hunting workflow that detects anomalous service-account logons, lateral movement, and privilege escalation by guiding analysts through hypothesis formation, SIEM/EDR querying, correlation and validation for proactive response.

Language