Download

Skill UI

Browse and discover 7044+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search correlation , found 10 results

Default Newest Most Downloaded

Structured API Request Logging

logging-api-requests

jeremylongshore/claude-code-plugins-plus-skills

Monitors and logs API requests with structured metadata, correlation IDs, performance timing, security audit trails, PII redaction, and audit flags for compliance debugging and analysis.

Splunk SPL Detection Rules

building-detection-rule-with-splunk-spl

mukul975/Anthropic-Cybersecurity-Skills

Guide to using Splunk Search Processing Language to craft correlation searches that aggregate logs, apply thresholds, detect anomalies, and enrich context so SOC analysts can spot brute-force, lateral movement, exfiltration, and other threats.

Splunk Threat Intelligence Enrichment

building-threat-intelligence-enrichment-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Automate Splunk ES threat intelligence enrichment by ingesting external feeds, normalizing IOCs into KV Store collections, and running lookup-based correlation searches so SOC analysts get immediate context from multiple sources.

QRadar Security Event Correlation

correlating-security-events-in-qradar

mukul975/Anthropic-Cybersecurity-Skills

Correlates IBM QRadar SIEM events using AQL queries, custom rules, building blocks, and reference sets to detect multi-stage attacks, tune offenses, and enrich context across network, endpoint, and application logs.

Service Account Abuse Detection

detecting-service-account-abuse

mukul975/Anthropic-Cybersecurity-Skills

Structured threat-hunting workflow that detects anomalous service-account logons, lateral movement, and privilege escalation by guiding analysts through hypothesis formation, SIEM/EDR querying, correlation and validation for proactive response.

Suspicious Scheduled Task Hunt

hunting-for-suspicious-scheduled-tasks

mukul975/Anthropic-Cybersecurity-Skills

Detect and investigate suspicious Windows scheduled tasks by analyzing creation events, task properties, triggers, and execution correlations to expose persistence mechanisms, unusual activity, and MITRE T1053.005 abuse during proactive hunts or incident response.

SIEM Correlation for APT

implementing-siem-correlation-rules-for-apt

mukul975/Anthropic-Cybersecurity-Skills

Crafts multi-event SIEM correlation rules in Splunk SPL and Sigma to detect APT lateral movement by chaining Windows auth, process execution, and network/Sysmon telemetry within sliding time windows for improved operational visibility.

SIEM Detection Use Cases

implementing-siem-use-cases-for-detection

mukul975/Anthropic-Cybersecurity-Skills

Helps SOC teams design detection use cases for SIEM platforms by mapping MITRE techniques, creating correlation rules, and formalizing lifecycle management across Splunk, Elastic, and Sentinel for production monitoring.

SIEM False Positive Reduction

performing-false-positive-reduction-in-siem

mukul975/Anthropic-Cybersecurity-Skills

Systematically tune SIEM rules, thresholds, allowlists, correlations, and enrichment so SOC analysts can focus on genuine threats instead of alert fatigue, especially during security assessments and incident response cycles.

NTLM Relay Detection

detecting-ntlm-relay-with-event-correlation

mukul975/Anthropic-Cybersecurity-Skills

Detect NTLM relay attacks by correlating Windows Security Event 4624 LogonType 3 entries against IP-to-hostname inventories, auditing SMB/LDAP signing enforcement, spotting Responder/LLMNR poisoning traffic, and tagging NTLM downgrade attempts for SIEM alerting.

1

Language