Download

Skill UI

Browse and discover 7282+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search audit , found 299 results

Default Newest Most Downloaded

Audit Kubernetes RBAC

auditing-kubernetes-cluster-rbac

mukul975/Anthropic-Cybersecurity-Skills

Audits Kubernetes cluster RBAC setups across EKS/GKE/AKS or self-managed clusters to spot overly permissive roles, secret access, wildcard permissions, dangerous bindings, and privilege escalation paths using kubectl, rbac-tool, KubiScan, and Kubeaudit.

Audit Kubernetes RBAC

auditing-kubernetes-rbac-permissions

mukul975/Anthropic-Cybersecurity-Skills

Systematically review Kubernetes RBAC roles, bindings, and service accounts to surface overly permissive access, privilege escalation paths, and least-privilege violations using tools like rbac-tool and KubiScan.

Terraform Security Audit

auditing-terraform-infrastructure-for-security

mukul975/Anthropic-Cybersecurity-Skills

Automates review of Terraform infrastructure-as-code via Checkov, tfsec, Terrascan, and OPA/Rego policies to find permissive IAM roles, public exposure, missing encryption, and insecure defaults before cloud deployment.

Incident Response Playbooks

building-incident-response-playbook

mukul975/Anthropic-Cybersecurity-Skills

Guides cybersecurity teams to design reusable incident response playbooks aligned with NIST SP 800-61r3 and SANS PICERL, covering structured procedures, decision trees, escalation rules, RACI matrices, and SOAR automation for documented, auditable IR readiness.

Social Engineering Pretext Call

conducting-social-engineering-pretext-call

mukul975/Anthropic-Cybersecurity-Skills

Conduct authorized vishing pretext calls to assess employee susceptibility, validate verification workflows, and benchmark security awareness during red team engagements and security audits.

Windows Event Logging Detection

configuring-windows-event-logging-for-detection

mukul975/Anthropic-Cybersecurity-Skills

Guides configuring Windows Advanced Audit Policy, enabling command-line capture, sizing event logs, and forwarding critical IDs so SOC teams feed high-fidelity security events into SIEMs for detection and investigation.

Container Escape Detection

detecting-container-escape-attempts

mukul975/Anthropic-Cybersecurity-Skills

Blueprint for using runtime monitoring (Falco, auditd, custom rules) to spot namespace/capability abuse, sensitive mounts, and syscalls that signal container escape attempts.

Active Directory DCSync Detection

detecting-dcsync-attack-in-active-directory

mukul975/Anthropic-Cybersecurity-Skills

Hunts for DCSync attacks by monitoring Active Directory replication requests, auditing Event ID 4662, correlating non-domain-controller RPC traffic, and alerting when unauthorized accounts request replication rights to detect credential theft.

Azure Storage Security Audit

detecting-misconfigured-azure-storage

mukul975/Anthropic-Cybersecurity-Skills

Automates detection of misconfigured Azure Storage accounts by checking for public blob containers, missing encryption, overly permissive SAS tokens, disabled logging, and loose network rules via Azure CLI/PowerShell/Defender for Storage across subscriptions.

CiCd Supply Chain Detection

detecting-supply-chain-attacks-in-ci-cd

mukul975/Anthropic-Cybersecurity-Skills

Scans GitHub Actions workflows and CI/CD pipeline files to flag unpinned actions, expressions that may inject scripts, dependency confusion, and exposed secrets while automating audits for analysts hardening build systems.

Detect Suspicious OAuth Consent

detecting-suspicious-oauth-application-consent

mukul975/Anthropic-Cybersecurity-Skills

Detects illicit OAuth consent grants in Azure AD / Microsoft Entra ID by enumerating OAuth2 permission grants, reviewing consent audit logs, analyzing permission scopes and publisher verification via Microsoft Graph, and generating risk reports for SOC analysts.

EDR Credential Dumping Detection

detecting-t1003-credential-dumping-with-edr

mukul975/Anthropic-Cybersecurity-Skills

Use EDR telemetry, Sysmon, and Windows auditing to detect T1003 credential dumping via LSASS, SAM, NTDS, and cached credentials, then correlate lateral movement indicators and guide response actions.

Prev 1 2 3...14 15 161718 19 20...23 24 25 Next

Language