Download

Skill UI

Browse and discover 9673+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search SOAR , found 10 results

Default Newest Most Downloaded

IOC Enrichment Automation

automating-ioc-enrichment

mukul975/Anthropic-Cybersecurity-Skills

Automates enrichment of indicators of compromise with multi-source threat intelligence via SOAR playbooks or Python pipelines to speed SIEM alert triage and bulk IOC processing.

Cloud SIEM Sentinel Deployment

building-cloud-siem-with-sentinel

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying Microsoft Sentinel as a cloud-native SIEM and SOAR stack, covering multi-cloud data connectors, KQL detection hunting, Logic Apps playbooks, and using the Sentinel data lake to hunt petabyte-scale telemetry from AWS, Azure, and GCP.

Incident Response Playbooks

building-incident-response-playbook

mukul975/Anthropic-Cybersecurity-Skills

Guides cybersecurity teams to design reusable incident response playbooks aligned with NIST SP 800-61r3 and SANS PICERL, covering structured procedures, decision trees, escalation rules, RACI matrices, and SOAR automation for documented, auditable IR readiness.

MISP Threat Feed Aggregator

building-threat-feed-aggregation-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Deploy MISP via Docker to aggregate, correlate, and enrich threat feeds from OSINT and partner sources, automate IOC distribution, and feed downstream SIEM, SOAR, and analytics tooling for cohesive cyber defense.

STIX 2.1 Threat Sharing

implementing-security-information-sharing-with-stix2

mukul975/Anthropic-Cybersecurity-Skills

Guide for building STIX 2.1 objects and publishing them via TAXII 2.1 using the stix2 Python library, covering indicators, malware, campaigns, relationships, bundles, and downstream SIEM/SOAR sharing.

SOAR Automation With Phantom

implementing-soar-automation-with-phantom

mukul975/Anthropic-Cybersecurity-Skills

Automates SOC triage and incident response workflows by using Splunk SOAR playbooks to enrich alerts, enforce analyst gates, and orchestrate containment via tool integrations.

Phishing SOAR Playbook Automation

implementing-soar-playbook-for-phishing

mukul975/Anthropic-Cybersecurity-Skills

Automates phishing incident response by parsing suspicious emails, creating Splunk SOAR containers and artifacts via the REST API, and triggering investigation playbooks while polling for results to deliver summarized verdicts.

Implementing XSOAR SOAR Playbook

implementing-soar-playbook-with-palo-alto-xsoar

mukul975/Anthropic-Cybersecurity-Skills

Automates SOC workflows with Palo Alto Cortex XSOAR by defining incident playbooks, integration-driven enrichment, and containment steps for phishing and other incidents to cut MTTR and streamline analyst actions.

OpenTAXII TAXII Server

implementing-taxii-server-with-opentaxii

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure an OpenTAXII-based TAXII 2.1 server to share STIX 2.1 threat intelligence collections, define access roles, and automate indicator ingestion into SIEM/SOAR pipelines for collaborative CTI exchange.

IOC Enrichment Automation

performing-ioc-enrichment-automation

mukul975/Anthropic-Cybersecurity-Skills

Automates IOC enrichment by orchestrating VirusTotal, AbuseIPDB, Shodan, MISP, and other intelligence sources to score IPs, domains, URLs, and hashes during SOC triage or incident analysis.

1

Language