Download

Skill UI

Browse and discover 6052+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Logs , found 128 results

Default Newest Most Downloaded

Insider Data Exfiltration Detection

detecting-insider-data-exfiltration-via-dlp

mukul975/Anthropic-Cybersecurity-Skills

Detects insider data exfiltration by analyzing DLP policy violations, file access patterns, upload-volume anomalies, and off-hours activity from endpoint and cloud logs; ideal for investigations or building user-behavior analytics for DLP.

Lateral Movement Detection

detecting-lateral-movement-in-network

mukul975/Anthropic-Cybersecurity-Skills

Analyzes authentication logs, SMB flows, RDP sessions, and Zeek data to spot MITRE ATT&CK lateral movement techniques, powering SIEM alerts, hunting, and post-compromise investigations in enterprise networks.

Zeek Network Anomaly Detection

detecting-network-anomalies-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Deploys Zeek to passively monitor network traffic, emit structured connection/DNS/HTTP/SSL logs, and run custom scripts that flag anomalous behavior for threat hunting and incident response teams.

Kubernetes Privilege Escalation Guard

detecting-privilege-escalation-in-kubernetes-pods

mukul975/Anthropic-Cybersecurity-Skills

Detects and prevents privilege escalation for Kubernetes pods by combining admission policies (Pod Security Admission, OPA Gatekeeper) and runtime monitoring (Falco) to watch security contexts, capabilities, syscalls, and audit logs for privileged containers, host namespace access, or dangerous capabilities.

RDP Brute Force Detection

detecting-rdp-brute-force-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detect RDP brute-force attacks by parsing Windows Security EVTX logs, correlating Event ID 4625 failures with subsequent 4624 successes, spotting NLA bypass patterns, and summarizing source-IP trends for actionable alerts.

Shadow API Discovery

detecting-shadow-api-endpoints

mukul975/Anthropic-Cybersecurity-Skills

Identifies undocumented or rogue API endpoints by comparing traffic logs and code/configuration data against OpenAPI specs, helping teams inventory shadow APIs and improve governance.

WAF SQLi Detection

detecting-sql-injection-via-waf-logs

mukul975/Anthropic-Cybersecurity-Skills

Processes ModSecurity/AWS Cloudflare WAF logs to surface SQL injection campaigns, spotting UNION SELECT/OR 1=1/SLEEP payloads, clustering attacker IPs, correlating multi-stage requests, and issuing OWASP-classified incident reports.

Suspicious OAuth Consent Detection

detecting-suspicious-oauth-application-consent

mukul975/Anthropic-Cybersecurity-Skills

Detect illicit consent grant attacks in Azure AD/Entra ID by using Microsoft Graph to inspect OAuth2 permissions, analyze application scope risk, review audit logs, and report suspicious apps.

Windows Event Log Forensics

extracting-windows-event-logs-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract, parse, and analyze EVTX files with Chainsaw, Hayabusa, and EvtxECmd to uncover lateral movement, persistence, and privilege escalation during incident response and forensic investigations.

Advanced Threat Hunting

hunting-advanced-persistent-threats

mukul975/Anthropic-Cybersecurity-Skills

Hunt for Advanced Persistent Threats across endpoints, network logs, and memory using MITRE ATT&CK hypotheses, Velociraptor/osquery queries, and SIEM pivots to validate threats or gaps before escalation.

Credential Stuffing Detection

hunting-credential-stuffing-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detects credential stuffing by analyzing authentication logs for login velocity anomalies, ASN diversity, password spray patterns, and geographic distribution of failed logins, helping incident responders investigate account takeover campaigns or craft new detection rules.

DNS Persistence Hunting

hunting-for-dns-based-persistence

mukul975/Anthropic-Cybersecurity-Skills

Hunt DNS persistence by exporting zone baselines, querying SecurityTrails passive history, and auditing provider logs to spot hijacks, dangling records, and unauthorized delegations.

Prev 1 2 3...6 7 8910 11 Next

Language