Download

Skill UI

Browse and discover 6252+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search SIEM , found 74 results

Default Newest Most Downloaded

Runtime Application Self-Protection

implementing-runtime-application-self-protection

mukul975/Anthropic-Cybersecurity-Skills

Deploy RASP agents inside Java or Python webapps to detect and block OWASP Top 10 attacks, tune policies, and feed telemetry into SIEMs for runtime visibility and compliance readiness.

STIX 2.1 Threat Sharing

implementing-security-information-sharing-with-stix2

mukul975/Anthropic-Cybersecurity-Skills

Create, validate, and share STIX 2.1 intelligence objects via the stix2 Python library and TAXII 2.1 transport, covering SDOs, relationships, bundles, and indicators for integrating with MISP, OpenCTI, SIEM, and SOAR pipelines.

Datadog Security Monitoring

implementing-security-monitoring-with-datadog

mukul975/Anthropic-Cybersecurity-Skills

Guides teams through implementing Datadog Security Monitoring with Cloud SIEM, CSM, and Workload Protection to centralize threat detection, compliance checks, log ingestion, dashboards, and automated alerts across cloud and hybrid environments.

APT SIEM Correlation Rules

implementing-siem-correlation-rules-for-apt

mukul975/Anthropic-Cybersecurity-Skills

Creates Splunk/Sigma multi-event correlation rules that link Windows authentication, process execution, and network logs to expose APT lateral movement chains missed by single-event detections.

SIEM Detection Use Cases

implementing-siem-use-cases-for-detection

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC teams through structured SIEM detection use cases on Splunk, Elastic, and Sentinel, spanning coverage-gap assessment, templated documentation, platform-specific correlation rules, and simulation-based validation tied to MITRE ATT&CK.

STIX TAXII Feed Integration

implementing-stix-taxii-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Implements STIX/TAXII 2.1 feed consumer and producer workflows with Python, covering TAXII discovery, collection polling, STIX object parsing, and integration into SIEM/TIP platforms for automated threat intelligence ingestion.

Deploy TAXII Server

implementing-taxii-server-with-opentaxii

mukul975/Anthropic-Cybersecurity-Skills

Use OpenTAXII and TAXII 2.1 to host STIX 2.1 collections, configure access controls, and automate indicator exchange with SIEM/SOAR through a Dockerized Medallion deployment.

Threat Intelligence Lifecycle

implementing-threat-intelligence-lifecycle-management

mukul975/Anthropic-Cybersecurity-Skills

Implements a structured threat intelligence lifecycle from requirements through collection, processing, analysis, dissemination, and feedback, integrating platforms like MISP/OpenCTI, SIEMs, and ticketing to deliver actionable CTI for security decision-making.

MISP Threat Intelligence

implementing-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Build a PyMISP-driven threat intelligence platform that ingests multiple IOC feeds, tags MITRE ATT&CK techniques, enriches data via VirusTotal and AbuseIPDB, and exports STIX 2.1 bundles for SIEM pipelines.

Incident Ticketing Automation

implementing-ticketing-system-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Automates SOC incident lifecycle by routing SIEM alerts into ServiceNow/Jira/TheHive tickets, enforcing SLA timing, assignment routing, escalations, and compliance-ready documentation.

ModSecurity Logging Implementation

implementing-web-application-logging-with-modsecurity

mukul975/Anthropic-Cybersecurity-Skills

Guide to configure ModSecurity WAF with OWASP CRS, log comprehensive request data, tune rules to suppress false positives, forward audit logs to SIEM, and move to blocking mode for hardened web applications.

Insider Threat Indicators Investigation

investigating-insider-threat-indicators

mukul975/Anthropic-Cybersecurity-Skills

Investigates insider threat indicators such as data exfiltration, unauthorized access, and policy violations by correlating SIEM analytics, DLP alerts, UEBA signals, and HR data to build timelines when referrals or anomalies arise.

Prev 1 2 3 456 7 Next

Language