Download

Skill UI

Browse and discover 6011+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search SIEM , found 72 results

Default Newest Most Downloaded

SIEM Rule Generator

siem-rule-generator

jeremylongshore/claude-code-plugins-plus-skills

Automates SIEM rule generation within advanced security workflows, guiding through industry best practices, compliance checks, and threat modeling to deliver production-ready configurations verified against common standards.

Windsurf Audit Logging Setup

windsurf-audit-logging

jeremylongshore/claude-code-plugins-plus-skills

Sets up Windsurf Enterprise audit logging to capture AI interactions, file access, authentication events, and configuration changes so compliance teams can trace activity, integrate with SIEM, and trigger automated alerts.

DNS Exfiltration Detection

analyzing-dns-logs-for-exfiltration

mukul975/Anthropic-Cybersecurity-Skills

Scans DNS query logs within SIEM platforms to flag data exfiltration by spotting suspicious tunneling subdomains, high-entropy DGA-style domains, and abnormal query volumes, helping SOC teams uncover DNS-based threats evading standard controls.

Kubernetes Audit Analyzer

analyzing-kubernetes-audit-logs

mukul975/Anthropic-Cybersecurity-Skills

Parses Kubernetes API server audit logs (JSON lines) to surface exec sessions, secret accesses, RBAC changes, privileged pods, and anonymous requests so incident responders or SIEM rule authors can spot cluster compromises.

Automated IOC Enrichment

automating-ioc-enrichment

mukul975/Anthropic-Cybersecurity-Skills

Automates IOC enrichment by orchestrating multi-source threat intelligence via SOAR playbooks or Python pipelines so SIEM alerts, email submissions, and bulk feeds pre-populate analyst context with VirusTotal, Shodan, MISP, AbuseIPDB, and TIP data.

Automated Malware Pipeline

building-automated-malware-submission-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Creates a scalable SOC workflow to collect suspicious files from endpoints and mail gateways, enrich them with hash lookups, submit to sandboxes/multi-engine scanners, and emit verdicts with IOCs for automated triage and SIEM integration.

Cloud SIEM With Sentinel

building-cloud-siem-with-sentinel

mukul975/Anthropic-Cybersecurity-Skills

Deploy Microsoft Sentinel as a cloud-native SIEM and SOAR platform, configure multi-cloud connectors, author KQL detection rules, and automate incident responses to support centralized SOC threat hunting.

SOC Metrics KPI Tracking

building-soc-metrics-and-kpi-tracking

mukul975/Anthropic-Cybersecurity-Skills

Builds SOC performance dashboards that track MTTD, MTTR, alert quality, analyst productivity, and ATT&CK coverage from SIEM data to give leadership operational visibility, continuous improvement insights, and executive reporting on effectiveness.

MISP Threat Feed Aggregation

building-threat-feed-aggregation-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Deploys MISP via Docker and PyMISP to aggregate, correlate, and distribute threat intelligence feeds from OSINT and commercial sources, enabling centralized IOC management, automated SIEM/SOAR integration, and synchronized sharing across communities.

Threat Intelligence Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion, normalization, scoring, and distribution of STIX/TAXII and open-source threat feeds so SOCs can match IOCs in real time across SIEM and detection tools.

Threat Intelligence Platform Build

building-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Guides building a unified Threat Intelligence Platform by orchestrating CTI tools like MISP, OpenCTI, TheHive, Cortex, and shared storage/enrichment services via Docker Compose and API integrations.

Vulnerability Scanning Workflow

building-vulnerability-scanning-workflow

mukul975/Anthropic-Cybersecurity-Skills

Defines a structured vulnerability scanning workflow for SOC teams, covering Nessus/Qualys/OpenVAS scheduling, risk prioritization, and SIEM-ready remediation tracking dashboards.

12 3 4 5 6 Next

Language