Download

Skill UI

Browse and discover 6201+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search edr , found 24 results

Default Newest Most Downloaded

Active Directory Attack Simulation

executing-active-directory-attack-simulation

mukul975/Anthropic-Cybersecurity-Skills

Simulates authorized Active Directory attack paths using BloodHound, Mimikatz, Impacket and related tools to surface misconfigurations, weak credentials, Kerberos flaws and privilege paths before adversaries exploit them; ideal for AD pentests, SOC/EDR validation, and privilege escalation resistance checks.

Data Staging Hunt

hunting-for-data-staging-before-exfiltration

mukul975/Anthropic-Cybersecurity-Skills

Detects data-staging activity prior to exfiltration by tracking archive tool execution, staging directories, large file consolidations, and sensitive path access via EDR/Sysmon telemetry; outputs risk scores, archive timelines, and MITRE ATT&CK mappings for hunters.

Cloud Living-Off Hunting

hunting-for-living-off-the-cloud-techniques

mukul975/Anthropic-Cybersecurity-Skills

Structured guidance for hunting adversary living-off-the-cloud tactics across Azure, AWS, GCP, and SaaS by formulating hypotheses, querying SIEM/EDR telemetry, correlating anomalies, and reporting validated findings.

Living Off-the-Land Hunt

hunting-for-living-off-the-land-binaries

mukul975/Anthropic-Cybersecurity-Skills

Proactively hunt for adversary abuse of legitimate system binaries (LOLBins) by analyzing EDR/SIEM telemetry, correlating network activity, and documenting findings to inform detections for defense-evasion scenarios.

Scheduled Task Persistence Hunt

hunting-for-scheduled-task-persistence

mukul975/Anthropic-Cybersecurity-Skills

Hunt for adversary persistence via Windows Scheduled Tasks by analyzing creation events, suspicious task actions, and unusual scheduling patterns across EDR and SIEM telemetry to validate detections and inform incident response.

Security Chaos Engineering

implementing-security-chaos-engineering

mukul975/Anthropic-Cybersecurity-Skills

Designs and runs security chaos engineering experiments that intentionally break guards—WAF, firewall, logging, EDR and IAM controls—using Python/boto3 to validate SOC detection, alerting, and response readiness.

Cloud Storage Forensic Acquisition

performing-cloud-storage-forensic-acquisition

mukul975/Anthropic-Cybersecurity-Skills

Collects forensic evidence from Google Drive, OneDrive, Dropbox, and Box by combining API-based acquisitions with local sync client artifact harvesting, enabling incident responders to gather remote data plus endpoint metadata for investigations.

Privilege Escalation Assessment

performing-privilege-escalation-assessment

mukul975/Anthropic-Cybersecurity-Skills

Performs privilege escalation assessments on compromised Linux and Windows hosts to trace paths from low-privilege shells to root/SYSTEM control. Enumerates misconfigurations, SUID binaries, kernel exploits, and credential stores so testers can demonstrate escalation impact and validate controls like least-privilege policies and EDR detections.

Atomic Threat Emulation

performing-threat-emulation-with-atomic-red-team

mukul975/Anthropic-Cybersecurity-Skills

Orchestrates Atomic Red Team MITRE ATT&CK tests via atomic-operator to simulate techniques, validate SIEM/EDR detections, and document coverage gaps during purple-team or control verification exercises.

Structured IR Playbook Triage

triaging-security-incident-with-ir-playbook

mukul975/Anthropic-Cybersecurity-Skills

Use structured incident response playbooks to validate alerts from SIEM/EDR, enrich telemetry, classify severity, assign teams, and trigger escalation or containment workflows.

Ransomware Canary Deployment

deploying-decoy-files-for-ransomware-detection

mukul975/Anthropic-Cybersecurity-Skills

Deploys honeytoken decoy files across critical shares and endpoints, watches them with file-integrity or OS-level observers, and alerts SOCs when ransomware modifies, encrypts, or renames a canary, offering a precise detection layer that complements backups and EDR.

Multi-Source Paper Search

K-Dense-AI/claude-scientific-skills

Search PubMed, PMC, bioRxiv, medRxiv, arXiv, OpenAlex, Crossref, Semantic Scholar, CORE, and Unpaywall via their APIs to find papers, metadata, citations, OA PDFs, or preprints by DOI, PMID, author, or keyword while guiding the best database choices.

Language