Download

Skill UI

Browse and discover 7129+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Log Hunting , found 30 results

Default Newest Most Downloaded

Hunt Advanced Persistent Threats

hunting-advanced-persistent-threats

mukul975/Anthropic-Cybersecurity-Skills

Proactively hunt for Advanced Persistent Threats (APTs) by building hypothesis-driven searches across telemetry, network logs, and memory artifacts, using MITRE ATT&CK, Velociraptor, osquery, Zeek, and Sigma-compatible playbooks to validate or rule out known TTPs.

Credential Stuffing Hunting

hunting-credential-stuffing-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detects and investigates credential stuffing by analyzing authentication logs for login velocity anomalies, ASN diversity, password spray behavior, and geographic inconsistencies so SOC teams can build detection rules with Splunk or pandas.

Anomalous PowerShell Hunt

hunting-for-anomalous-powershell-execution

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Script Block Logging (4104), Module Logging (4103), and process creation events in EVTX exports to detect obfuscated PowerShell activity, AMSI bypass attempts, encoded payloads, download cradles, credential dumping, and to prioritize findings for SOC analysts.

Beaconing Frequency Hunting

hunting-for-beaconing-with-frequency-analysis

mukul975/Anthropic-Cybersecurity-Skills

Apply frequency analysis, jitter metrics, and coefficient-of-variation scoring to Zeek/proxy logs and SIEM data to surface periodic C2 beaconing, enrich with threat intelligence, correlate endpoints, and prioritize high-risk callbacks during threat hunting.

DNS Persistence Hunting Guide

hunting-for-dns-based-persistence

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step skill to hunt DNS-based persistence by auditing zone baselines, querying SecurityTrails passive DNS, analyzing provider audit logs, and correlating anomalies to malicious infrastructure for actionable reports.

Zeek DNS Tunnel Detection

hunting-for-dns-tunneling-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek dns.log for long queries, high-entropy subdomains, unusual record types, and query volumes to detect DNS tunneling and covert data exfiltration before it reaches other channels.

Detect WMI Lateral Movement

hunting-for-lateral-movement-via-wmi

mukul975/Anthropic-Cybersecurity-Skills

Hunt for WMI-based lateral movement by parsing Windows Event ID 4688 and Sysmon Event ID 1 logs, flagging WmiPrvSE.exe child processes, suspicious command lines, and WMI subscription persistence to produce a structured alert report.

Hunt LOLBins Execution

hunting-for-lolbins-execution-in-endpoint-logs

mukul975/Anthropic-Cybersecurity-Skills

Analyzes endpoint process logs to detect legitimate Windows binaries abused by adversaries, ranking suspicious command lines, parent processes, execution paths, and network cues for prioritized triage.

Process Injection Hunting

hunting-for-process-injection-techniques

mukul975/Anthropic-Cybersecurity-Skills

Hunts MITRE ATT&CK T1055 process-injection techniques via Sysmon Event IDs 8/10 and EDR telemetry, parsing JSON logs to flag CreateRemoteThread calls, risky access masks, and reporting severity with mitigation guidance.

Registry Persistence Hunt

hunting-for-registry-persistence-mechanisms

mukul975/Anthropic-Cybersecurity-Skills

Hunt for registry-based persistence artifacts such as Run keys, Winlogon helpers, IFEO injectors, and COM hijacks by correlating EDR, SIEM, and Sysmon data to validate hypotheses and document findings.

Registry Run Key Hunting

hunting-for-registry-run-key-persistence

mukul975/Anthropic-Cybersecurity-Skills

Hunts registry Run key persistence by parsing Sysmon Event ID 13 logs, flagging suspicious auto-start entries, correlating with process/file creation events, and building Sigma/Splunk rules.

Spearphishing Indicator Hunt

hunting-for-spearphishing-indicators

mukul975/Anthropic-Cybersecurity-Skills

Hunt for spearphishing indicators across email logs, endpoint telemetry, and network data to detect targeted campaigns, validate intelligence, and update detections with actionable findings for containment.

Language