Download

Skill UI

Browse and discover 6075+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Response , found 162 results

Default Newest Most Downloaded

Patch Tuesday Response Process

building-patch-tuesday-response-process

mukul975/Anthropic-Cybersecurity-Skills

Defines a monthly Patch Tuesday playbook to triage MSRC advisories, prioritize CVEs, scan target groups, and deploy ring-based patches within SLA-driven remediation windows.

SOC Escalation Matrix

building-soc-escalation-matrix

mukul975/Anthropic-Cybersecurity-Skills

Defines a structured SOC escalation matrix covering severity tiers, tiered roles, SLA response times, notification templates, and automation hooks so security teams can consistently handle incidents.

Threat Hunt Hypothesis

building-threat-hunt-hypothesis-framework

mukul975/Anthropic-Cybersecurity-Skills

Establishes a systematic process that turns threat intelligence, ATT&CK gaps, and telemetry into testable hunting hypotheses, guiding analysts through data selection, query execution, and reporting for proactive detection and response.

Volatile Evidence Collection

collecting-volatile-evidence-from-compromised-host

mukul975/Anthropic-Cybersecurity-Skills

Guides responders through collecting memory, network, and process snapshots from compromised hosts before volatility is lost, ensuring chain-of-custody and supporting incident response plus legal follow-up.

Cloud Incident Response Manual

conducting-cloud-incident-response

mukul975/Anthropic-Cybersecurity-Skills

Guides responders through detecting, containing, and investigating AWS/Azure/GCP compromises by centralizing log analysis, isolating identities/resources, and preserving forensic evidence for fast cloud incident recovery.

Full-Scope Red Team Ops

conducting-full-scope-red-team-engagement

mukul975/Anthropic-Cybersecurity-Skills

Guides planning and executing MITRE ATT&CK aligned red team engagements from reconnaissance through reporting, emphasizing stealthy, objective-driven simulations that stress-test detection and response.

MitM Attack Simulation

conducting-man-in-the-middle-attack-simulation

mukul975/Anthropic-Cybersecurity-Skills

Simulates MITM scenarios with Bettercap, Ettercap, and mitmproxy in authorized lab settings to validate TLS enforcement, DNS/ARP spoofing detection, credential interception, and defender response workflows through controlled traffic manipulation.

GuardDuty Findings Automation

detecting-aws-guardduty-findings-automation

mukul975/Anthropic-Cybersecurity-Skills

Automates GuardDuty findings processing with EventBridge and Lambda so that high-severity threats trigger quarantines, forensic snapshots, and SNS alerts for real-time incident response.

Azure Lateral Movement Detection

detecting-azure-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detect Azure AD/Entra ID lateral movement by correlating Microsoft Graph audit logs, sign-in anomalies, and Sentinel KQL rules to surface credential abuse, token theft, and cross-tenant pivots, then automate responses via playbooks.

Cloud Cryptomining Detection

detecting-cloud-cryptomining-activity

mukul975/Anthropic-Cybersecurity-Skills

Detect unauthorized crypto-mining in AWS, Azure, and GCP by correlating GuardDuty/Defender/SCC findings, compute anomalies, network flows, and container/serverless behaviors to validate threats and guide response.

GuardDuty Cloud Threat Detection

detecting-cloud-threats-with-guardduty

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through deploying Amazon GuardDuty with protection plans for S3, EKS, EC2 runtime monitoring, and Lambda, interpreting findings, and wiring EventBridge plus Lambda for automated responses across AWS accounts.

Compromised Cloud Credentials Detection

detecting-compromised-cloud-credentials

mukul975/Anthropic-Cybersecurity-Skills

Detect compromised AWS, Azure, and GCP credentials by analyzing GuardDuty, Defender for Identity, and SCC alerts alongside log anomalies, impossible travel, and unauthorized provisioning indicators for rapid incident response.

Prev 1 2 3...7 8 91011 12 13 14 Next

Language