Download

Skill UI

Browse and discover 6034+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Persistence , found 23 results

Default Newest Most Downloaded

Detecting Fileless Malware

detecting-fileless-malware-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detects fileless malware in memory by analyzing PowerShell, WMI, registry-resident payloads, and LOLBin behaviors, guiding persistence, LOLBin abuse, and memory forensics investigations when no disk artifacts exist.

Sysmon Scheduled Task Detection

detecting-malicious-scheduled-tasks-with-sysmon

mukul975/Anthropic-Cybersecurity-Skills

Detects malicious scheduled task creation and modification by correlating Sysmon IDs 1 and 11 with Windows Event 4698/4702, highlighting persistence hunting, suspicious parent processes, public paths, and encoded commands when tracking T1053.005 activity.

Windows Event Log Forensics

extracting-windows-event-logs-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract, parse, and analyze EVTX files with Chainsaw, Hayabusa, and EvtxECmd to uncover lateral movement, persistence, and privilege escalation during incident response and forensic investigations.

DNS Persistence Hunting

hunting-for-dns-based-persistence

mukul975/Anthropic-Cybersecurity-Skills

Hunt DNS persistence by exporting zone baselines, querying SecurityTrails passive history, and auditing provider logs to spot hijacks, dangling records, and unauthorized delegations.

WMI Subscription Persistence

hunting-for-persistence-via-wmi-subscriptions

mukul975/Anthropic-Cybersecurity-Skills

Guide to hunting WMI-based persistence by monitoring Sysmon and Windows WMI subscription creation events, enumerating dangerous filters and consumers, analyzing triggers, and correlating WmiPrvSe.exe activity and MOF compilation to detect stealthy threats.

Scheduled Task Persistence Hunt

hunting-for-scheduled-task-persistence

mukul975/Anthropic-Cybersecurity-Skills

Hunt for adversary persistence via Windows Scheduled Tasks by analyzing creation events, suspicious task actions, and unusual scheduling patterns across EDR and SIEM telemetry to validate detections and inform incident response.

Startup Folder Persistence Detection

hunting-for-startup-folder-persistence

mukul975/Anthropic-Cybersecurity-Skills

Detects MITRE T1547.001 startup folder persistence by scanning Windows startup directories, analyzing file metadata/signatures, and using Python watchdog to raise real-time alerts on suspicious creations.

Osquery Endpoint Monitoring Setup

implementing-osquery-for-endpoint-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Automate the deployment of osquery scheduled queries to continuously monitor endpoints, covering process inventory, network listeners, file integrity, and persistence mechanisms; generate osquery.conf, configure differential logging, analyze suspicious results, and produce a security report.

Malware Persistence Analysis

performing-malware-persistence-investigation

mukul975/Anthropic-Cybersecurity-Skills

Systematically audit Windows and Linux autostart mechanisms, registry hives, scheduled tasks, and WMI entries to map how malware survives reboots and maintain access during incident response or threat hunting.

Ghidra Malware Reverse Engineering

reverse-engineering-malware-with-ghidra

mukul975/Anthropic-Cybersecurity-Skills

Disassemble and decompile suspicious binaries with Ghidra to understand malware logic, C2 protocols, encryption routines, and persistence mechanisms for detailed threat analysis.

Rust Malware Reverse Engineering

reverse-engineering-rust-malware

mukul975/Anthropic-Cybersecurity-Skills

Guide to reverse-engineer Rust-compiled malware with IDA Pro and Ghidra, extracting crate metadata, handling fat-pointer strings, and spotlighting encryption, networking, and persistence code for detection efforts.

Language