Download

Skill UI

Browse and discover 6582+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search SIEM , found 72 results

Default Newest Most Downloaded

Supply Chain Compromise Hunt

hunting-for-supply-chain-compromise

mukul975/Anthropic-Cybersecurity-Skills

Track trojanized updates, compromised dependencies, unauthorized code edits, and tampered build artifacts by querying EDR/SIEM telemetry, correlating indicators, and documenting findings for rapid response in proactive threat-hunting campaigns.

LOLBAS Detection Rules

hunting-living-off-the-land-binaries

mukul975/Anthropic-Cybersecurity-Skills

Monitors Windows process creation events to flag Living Off The Land Binary abuse by matching Event ID 4688/Sysmon 1 logs against LOLBAS database entries, supporting threat hunting and SIEM rule creation for fileless attacks.

CloudTrail Log Analysis

implementing-cloud-trail-log-analysis

mukul975/Anthropic-Cybersecurity-Skills

Analyzes CloudTrail logs via Athena, CloudWatch Logs Insights, and SIEM feeds to monitor AWS security, detect threats, and support forensic investigations by identifying unauthorized access, privilege escalations, and anomalous API activity.

Continuous Security Validation

implementing-continuous-security-validation-with-bas

mukul975/Anthropic-Cybersecurity-Skills

Automates continuous validation of security controls by emulating real attack techniques with BAS platforms such as SafeBreach, AttackIQ, or Cymulate, aligning results with MITRE ATT&CK and operational readiness.

Deploy Dragos Platform Monitoring

implementing-dragos-platform-for-ot-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure the Dragos Platform to monitor OT networks, tapping into 600+ industrial protocols, threat-intelligence-backed detection, asset discovery, vulnerability context, and SIEM integration for SOC teams.

Proofpoint Email Sandboxing

implementing-email-sandboxing-with-proofpoint

mukul975/Anthropic-Cybersecurity-Skills

Guide to configuring Proofpoint Targeted Attack Protection so suspicious attachments and URLs are detonated in isolated environments, policies are tuned, dashboards monitored, and SIEM workflows triggered for phishing defense.

Ransomware Honeypot Deployment

implementing-honeypot-for-ransomware-detection

mukul975/Anthropic-Cybersecurity-Skills

Deploys honeypot shares, canary files, and Thinkst Canary appliances to detect ransomware activity early via deception alerts tied to file access and modification.

MITRE Attack Coverage Mapping

implementing-mitre-attack-coverage-mapping

mukul975/Anthropic-Cybersecurity-Skills

Implements MITRE ATT&CK coverage mapping by exporting SIEM detection rules, building coverage matrices, scoring techniques, and surfacing gaps so SOC teams can prioritize rule development and track detection maturity.

Honeypot Network Deception Deployment

implementing-network-deception-with-honeypots

mukul975/Anthropic-Cybersecurity-Skills

Guide to deploying OpenCanary, Cowrie, or T-Pot honeypots to detect unauthorized access, lateral movement, and reconnaissance while forwarding alerts to a SIEM for faster incident response.

CyberArk Privileged Access Management

implementing-privileged-access-management-with-cyberark

mukul975/Anthropic-Cybersecurity-Skills

Plan and deploy CyberArk PAM to discover, vault, rotate, and monitor privileged credentials, manage isolated sessions, and integrate with SIEM for compliance-aligned security operations.

Runtime Application Protection

implementing-runtime-application-self-protection

mukul975/Anthropic-Cybersecurity-Skills

Deploy RASP agents for Java and Python web apps to detect and block OWASP Top 10 attacks from inside the runtime, tune detection policies, baseline behavior, and forward telemetry to SIEM for comprehensive audit and response.

STIX 2.1 Threat Sharing

implementing-security-information-sharing-with-stix2

mukul975/Anthropic-Cybersecurity-Skills

Guide for building STIX 2.1 objects and publishing them via TAXII 2.1 using the stix2 Python library, covering indicators, malware, campaigns, relationships, bundles, and downstream SIEM/SOAR sharing.

Prev 1 2 345 6 Next

Language