Download

Skill UI

Browse and discover 5987+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search MITRE-ATT&CK , found 24 results

Default Newest Most Downloaded

MITRE Navigator APT Analysis

analyzing-apt-group-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Query MITRE ATT&CK data, map APT group TTPs, and render multi-layer Navigator heatmaps so detection engineers can spot coverage gaps and prioritize defenses.

Malware Sandbox Evasion Detection

analyzing-malware-sandbox-evasion-techniques

mukul975/Anthropic-Cybersecurity-Skills

Analyze Cuckoo Sandbox and AnyRun behavioral JSON reports to detect timing checks, VM artifacts, user interaction probes, and sleep inflation that signal malware trying to evade sandbox analysis, then map findings to MITRE ATT&CK T1497.

Ransomware Network Detection

analyzing-ransomware-network-indicators

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek conn.log or NetFlow data to detect ransomware beaconing, TOR exit node use, high outbound flows, and DNS anomalies, then score risks and map findings to MITRE ATT&CK for reporting.

MITRE ATT&CK TTP Mapping

analyzing-threat-actor-ttps-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Map threat actors to the MITRE ATT&CK framework, build ATT&CK Navigator technique coverage layers, identify detection gaps, and link observed IOCs to adversary tactics across Enterprise, Mobile, and ICS matrices for actionable reporting.

Mapping APT TTPs With Navigator

analyzing-threat-actor-ttps-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Programmatically maps APT group tactics, techniques, and procedures to MITRE ATT&CK via attackcti and the ATT&CK Navigator, generating layer JSON files, overlaying detection coverage, and sharing visualizations for defense teams.

Splunk SPL Detection Rules

building-detection-rule-with-splunk-spl

mukul975/Anthropic-Cybersecurity-Skills

Guide for building Splunk Search Processing Language correlation searches that identify SOC threats, enrich events, configure notable alerts, and close MITRE ATT&CK coverage gaps in Enterprise Security deployments.

Sigma Detection Rule Builder

building-detection-rules-with-sigma

mukul975/Anthropic-Cybersecurity-Skills

Creates portable Sigma detection rules from threat intelligence, validating syntax and converting to Splunk, Elastic, or Sentinel queries so SOC teams can map rules to MITRE ATT&CK and reuse them in CI/CD pipelines.

Cloud Penetration Testing Guide

conducting-cloud-penetration-testing

mukul975/Anthropic-Cybersecurity-Skills

Provides a methodology for authorized penetration testing across AWS, Azure, and GCP clouds, detailing scope definition, reconnaissance with ScoutSuite/Prowler, IAM privilege escalation via Pacu, SSRF metadata access, and MITRE ATT&CK Cloud-aligned reporting.

Full-Scope Red Team Ops

conducting-full-scope-red-team-engagement

mukul975/Anthropic-Cybersecurity-Skills

Guides planning and executing MITRE ATT&CK aligned red team engagements from reconnaissance through reporting, emphasizing stealthy, objective-driven simulations that stress-test detection and response.

Evasion Detection Toolkit

detecting-evasion-techniques-in-endpoint-logs

mukul975/Anthropic-Cybersecurity-Skills

Guides security analysts through endpoint log use cases for detecting defense evasion tactics such as log tampering, timestomping, process injection, masquerading, LOLBin abuse, and security tool disabling to support hunting, rule development, and investigation aligned with MITRE ATT&CK TA0005.

Golden Ticket Detection

detecting-golden-ticket-forgery

mukul975/Anthropic-Cybersecurity-Skills

Detect Kerberos Golden Ticket forgery by analyzing Windows Event IDs 4768/4769 for RC4 downgrades, ticket lifetime violations, and krbtgt anomalies across Splunk or Elastic SIEM, producing risk-scored JSON reports tied to MITRE ATT&CK mapping.

Lateral Movement Detection

detecting-lateral-movement-in-network

mukul975/Anthropic-Cybersecurity-Skills

Analyzes authentication logs, SMB flows, RDP sessions, and Zeek data to spot MITRE ATT&CK lateral movement techniques, powering SIEM alerts, hunting, and post-compromise investigations in enterprise networks.

Language