Download

Skill UI

Browse and discover 6152+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Threat-Intel , found 31 results

Default Newest Most Downloaded

Threat Intelligence Platform Build

building-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Designs and deploys a unified threat intelligence platform using MISP, OpenCTI, TheHive, and Cortex to collect, enrich, analyze, and share CTI data via STIX/TAXII feeds, enabling compliance-friendly incident response and SOC workflows.

Compromise Indicator Collector

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Systematically collects and enriches IOCs from SIEM logs, memory analysis, and malware reports, then translates them into STIX/TAXII for defensive systems and trusted partners to detect, block, and share threat intelligence.

MISP Threat Intelligence Pipeline

collecting-threat-intelligence-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Guide for deploying MISP, configuring community and custom feeds, using PyMISP for scripted searches, and exporting validated IOCs in STIX/TAXII, Suricata, or CSV formats to automate threat intelligence ingestion.

Threat Campaign Correlation

correlating-threat-campaigns

mukul975/Anthropic-Cybersecurity-Skills

Correlates disparate incidents, IOCs, and adversary behaviors using infrastructure, capability, temporal, and victimology pivots to build campaign graphs and intelligence reports for detection tuning and attribution.

Insider Threat Detection

detecting-insider-threat-behaviors

mukul975/Anthropic-Cybersecurity-Skills

Detects insider threat behaviors by hunting for unusual data access, privilege abuse, mass downloads, and resignation-linked exfiltration across EDR, SIEM, and intelligence sources to guide incident response actions.

Zeek DNS Tunneling Hunt

hunting-for-dns-tunneling-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Detect DNS tunneling data exfiltration by analyzing Zeek dns.log for high-entropy subdomains, long queries, unusual record types, and elevated volume, correlating with connection metadata and threat intelligence.

Dragos OT Monitoring Deployment

implementing-dragos-platform-for-ot-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure the Dragos Platform to monitor OT networks with industrial protocol parsing, intelligence-driven threat detection, asset visibility, and SIEM integration for ICS-focused SOCs.

STIX 2.1 Threat Sharing

implementing-security-information-sharing-with-stix2

mukul975/Anthropic-Cybersecurity-Skills

Create, validate, and share STIX 2.1 intelligence objects via the stix2 Python library and TAXII 2.1 transport, covering SDOs, relationships, bundles, and indicators for integrating with MISP, OpenCTI, SIEM, and SOAR pipelines.

STIX TAXII Feed Integration

implementing-stix-taxii-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Implements STIX/TAXII 2.1 feed consumer and producer workflows with Python, covering TAXII discovery, collection polling, STIX object parsing, and integration into SIEM/TIP platforms for automated threat intelligence ingestion.

Threat Intelligence Lifecycle

implementing-threat-intelligence-lifecycle-management

mukul975/Anthropic-Cybersecurity-Skills

Implements a structured threat intelligence lifecycle from requirements through collection, processing, analysis, dissemination, and feedback, integrating platforms like MISP/OpenCTI, SIEMs, and ticketing to deliver actionable CTI for security decision-making.

MISP Threat Intelligence

implementing-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Build a PyMISP-driven threat intelligence platform that ingests multiple IOC feeds, tags MITRE ATT&CK techniques, enriches data via VirusTotal and AbuseIPDB, and exports STIX 2.1 bundles for SIEM pipelines.

MITRE ATT&CK Threat Modeling

implementing-threat-modeling-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Orchestrates MITRE ATT&CK-based threat modeling so SOC teams can map adversary TTPs, assess detection gaps, and prioritize defenses or procurement decisions with context-aware intelligence.

Language