Download

Skill UI

Browse and discover 6581+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search RSI , found 200 results

Default Newest Most Downloaded

DNS Persistence Hunting Guide

hunting-for-dns-based-persistence

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step skill to hunt DNS-based persistence by auditing zone baselines, querying SecurityTrails passive DNS, analyzing provider audit logs, and correlating anomalies to malicious infrastructure for actionable reports.

Detect WMI Lateral Movement

hunting-for-lateral-movement-via-wmi

mukul975/Anthropic-Cybersecurity-Skills

Hunt for WMI-based lateral movement by parsing Windows Event ID 4688 and Sysmon Event ID 1 logs, flagging WmiPrvSE.exe child processes, suspicious command lines, and WMI subscription persistence to produce a structured alert report.

Process Injection Hunting

hunting-for-process-injection-techniques

mukul975/Anthropic-Cybersecurity-Skills

Hunts MITRE ATT&CK T1055 process-injection techniques via Sysmon Event IDs 8/10 and EDR telemetry, parsing JSON logs to flag CreateRemoteThread calls, risky access masks, and reporting severity with mitigation guidance.

Registry Persistence Hunt

hunting-for-registry-persistence-mechanisms

mukul975/Anthropic-Cybersecurity-Skills

Hunt for registry-based persistence artifacts such as Run keys, Winlogon helpers, IFEO injectors, and COM hijacks by correlating EDR, SIEM, and Sysmon data to validate hypotheses and document findings.

Registry Run Key Hunting

hunting-for-registry-run-key-persistence

mukul975/Anthropic-Cybersecurity-Skills

Hunts registry Run key persistence by parsing Sysmon Event ID 13 logs, flagging suspicious auto-start entries, correlating with process/file creation events, and building Sigma/Splunk rules.

Scheduled Task Persistence Hunt

hunting-for-scheduled-task-persistence

mukul975/Anthropic-Cybersecurity-Skills

Guide for threat hunters to detect adversary persistence by hunting Windows Scheduled Tasks, analyzing creation events, suspicious actions, and abnormal schedules across SIEM and EDR telemetry.

Startup Folder Persistence Hunt

hunting-for-startup-folder-persistence

mukul975/Anthropic-Cybersecurity-Skills

Detect T1547.001 startup folder persistence by scanning Windows startup directories, analyzing metadata via autoruns, and watching folders with Python watchdog to produce JSON reports and alerts for suspicious implants.

Suspicious Scheduled Task Hunt

hunting-for-suspicious-scheduled-tasks

mukul975/Anthropic-Cybersecurity-Skills

Detect and investigate suspicious Windows scheduled tasks by analyzing creation events, task properties, triggers, and execution correlations to expose persistence mechanisms, unusual activity, and MITRE T1053.005 abuse during proactive hunts or incident response.

Detect Unusual Windows Services

hunting-for-unusual-service-installations

mukul975/Anthropic-Cybersecurity-Skills

Hunt malicious Windows services by parsing System.evtx Event ID 7045 records, analyzing binary paths (temp folders, PowerShell/cmd patterns), flagging risky indicators, and mapping findings to MITRE ATT&CK T1543.003 for SOC reporting.

Osquery Endpoint Monitoring Setup

implementing-osquery-for-endpoint-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Automate the deployment of osquery scheduled queries to continuously monitor endpoints, covering process inventory, network listeners, file integrity, and persistence mechanisms; generate osquery.conf, configure differential logging, analyze suspicious results, and produce a security report.

SIEM Use Case Tuning

implementing-siem-use-case-tuning

mukul975/Anthropic-Cybersecurity-Skills

Analyze Splunk and Elastic alert volumes to recalibrate thresholds, build whitelists, and track precision/recall so SOC teams reduce false positives and monitor alert-to-incident conversion after tuning.

Phishing SOAR Playbook Automation

implementing-soar-playbook-for-phishing

mukul975/Anthropic-Cybersecurity-Skills

Automates phishing incident response by parsing suspicious emails, creating Splunk SOAR containers and artifacts via the REST API, and triggering investigation playbooks while polling for results to deliver summarized verdicts.

Prev 1 2 3...11 12 131415 16 17 Next

Language