Download

Skill UI

Browse and discover 6058+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search SIEM , found 72 results

Default Newest Most Downloaded

Elastic SIEM Alert Triage

performing-alert-triage-with-elastic-siem

mukul975/Anthropic-Cybersecurity-Skills

Outlines a structured workflow inside Elastic Security SIEM for SOC analysts to triage alerts, investigate related activity with ES|QL queries, enrich findings via threat intelligence, and document escalation steps so teams can prioritize real threats and reduce noise.

ARP Spoofing Simulation

performing-arp-spoofing-attack-simulation

mukul975/Anthropic-Cybersecurity-Skills

Simulates ARP spoofing attacks in authorized labs by orchestrating arpspoof, Ettercap, and Scapy flows to demonstrate MITM dangers, validate detection systems (IDS/IPS, SIEM), and train SOC analysts while confirming DAI and port-security controls.

SIEM False Positive Reduction

performing-false-positive-reduction-in-siem

mukul975/Anthropic-Cybersecurity-Skills

Systematically reduce SIEM false positives through rule tuning, thresholds, correlation, allowlists, and threat intelligence enrichment while validating with Atomic Red Team runs and metrics to keep SOC analysts focused on true threats.

Lateral Movement Detection

performing-lateral-movement-detection

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement techniques such as Pass-the-Hash, PsExec, WMI, RDP, and SMB pivots through SIEM correlation of Windows event logs, network flows, and endpoint telemetry aligned with MITRE ATT&CK TA0008 for SOC response and investigation.

Automated SIEM Log Onboarding

performing-log-source-onboarding-in-siem

mukul975/Anthropic-Cybersecurity-Skills

Guide to perform structured log source onboarding into SIEM platforms, covering discovery, collector configuration, parsing, normalization, and validation so security teams ensure high-value telemetry is ingested reliably.

Zeek Network Traffic Analysis

performing-network-traffic-analysis-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Deploys Zeek as a passive network security monitor to collect, parse, and analyze protocol metadata so teams can detect threats, anomalies, and integrate findings with SIEM or forensic workflows.

Purple Team Exercise Orchestration

performing-purple-team-exercise

mukul975/Anthropic-Cybersecurity-Skills

Coordinates purple team exercises by pairing MITRE ATT&CK mapped adversary emulation with real-time SIEM monitoring so SOC analysts can validate detections and close gaps collaboratively.

S7comm Protocol Assessment

performing-s7comm-protocol-security-analysis

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Siemens SIMATIC S7comm and S7CommPlus traffic to spot replay, integrity-bypass, unauthorized CPU stops, and illicit downloads on S7-300/400/1200/1500 PLCs, supporting auditors and detection engineers during OT security assessments.

Threat Hunting with Elastic

performing-threat-hunting-with-elastic-siem

mukul975/Anthropic-Cybersecurity-Skills

Proactively hunt threats in Elastic Security SIEM with KQL/EQL queries, Timeline investigations, and detection rules, helping SOC teams validate ATT&CK techniques, investigate anomalies, and close coverage gaps when automated alerts miss adversaries.

User Behavior Analytics

performing-user-behavior-analytics

mukul975/Anthropic-Cybersecurity-Skills

Performs UEBA-based detection of impossible travel, unusual access, and privilege abuse so SOC teams can flag compromised accounts or insider threats by comparing recent behavior to SIEM baselines and statistical norms.

STIX TAXII Feed Processor

processing-stix-taxii-feeds

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion of STIX 2.1 bundles from TAXII 2.1 servers, validates object schemas, maps indicators to downstream TIP/SIEM platforms, and optionally publishes vetted intelligence for collaborative sharing.

Security Incident Triage

triaging-security-incident

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC analysts through initial triage of SIEM/EDR alerts using NIST SP 800-61r3 and SANS PICERL, classifying incidents, assessing severity via impact matrices, enriching with threat and asset context, and escalating to the right response team with containment steps.

Prev 1 2 3 4 56

Language