Download

Skill UI

Browse and discover 6152+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Security-Triage , found 9 results

Default Newest Most Downloaded

API Security Scanning

scanning-api-security

jeremylongshore/claude-code-plugins-plus-skills

Scans API implementations and configurations to detect OWASP API Security Top 10 issues, validate auth flows, rate limits, headers, and dependencies, and produce reports useful for CI gates or manual triage.

Network Incident Traffic Analysis

analyzing-network-traffic-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Analyzes PCAP captures, Zeek logs, and NetFlow flow data to uncover command-and-control, lateral movement, and exfiltration during security incidents; supports packet-level validation and IOC extraction for triage and response teams.

SOC Escalation Matrix

building-soc-escalation-matrix

mukul975/Anthropic-Cybersecurity-Skills

Defines a structured SOC escalation matrix covering severity tiers, response SLAs, escalation paths, and notification templates so security teams can align triage workflows to incident criticality and governance needs.

Splunk Threat Intelligence Enrichment

building-threat-intelligence-enrichment-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Build automated threat intelligence enrichment pipelines in Splunk Enterprise Security by ingesting modular inputs, normalizing indicators into KV Store lookups, and correlating them with events to accelerate SOC triage.

Elastic SIEM Alert Triage

performing-alert-triage-with-elastic-siem

mukul975/Anthropic-Cybersecurity-Skills

Guide to Elastic Security SIEM alert triage, covering initial assessment, ES|QL investigations, threat enrichment, classification, and documentation so SOC analysts can quickly classify and escalate suspicious events.

AFL++ Binary Fuzzing

performing-fuzzing-with-aflplusplus

mukul975/Anthropic-Cybersecurity-Skills

Use AFL++ coverage-guided fuzzing on compiled binaries to uncover crashes, hangs, and memory corruption. Instrument builds with afl-cc/afl-clang-fast, curate seeds via afl-cmin/afl-tmin, run afl-fuzz campaigns, and triage crashes with CASR or GDB for security assessments.

Splunk Alert Triage Flow

triaging-security-alerts-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC Tier 1 analysts through Splunk ES Incident Review to classify alert severity, investigate notable events with SPL, correlate telemetry, and document disposition decisions before escalating or closing incidents.

Security Incident Triage Playbook

triaging-security-incident-with-ir-playbook

mukul975/Anthropic-Cybersecurity-Skills

Structured guide to triage security alerts by enriching data, classifying incident type, scoring severity, and launching the proper IR playbooks plus team notifications so SOC analysts resolve threats faster.

Security Incident Triage

triaging-security-incident

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC analysts through initial triage of SIEM/EDR alerts using NIST SP 800-61r3 and SANS PICERL, classifying incidents, assessing severity via impact matrices, enriching with threat and asset context, and escalating to the right response team with containment steps.

1

Language