Download

Skill UI

Browse and discover 6278+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search ics , found 330 results

Default Newest Most Downloaded

Detecting Authentication Anomalies

detecting-anomalous-authentication-patterns

mukul975/Anthropic-Cybersecurity-Skills

Detects anomalous authentication patterns by normalizing logs across Azure AD, Okta, and Windows AD, then applying UEBA analytics and ML baselines to highlight impossible travel, credential stuffing, brute-force, password spraying, and other compromised-account behaviors.

SCADA Attack Detection

detecting-attacks-on-scada-systems

mukul975/Anthropic-Cybersecurity-Skills

Detects cyber attacks on SCADA/ICS environments by combining OT-specific IDS, industrial protocol anomaly detection, and process analytics to spot MITM, command injection, historian tampering, and DoS events missing from enterprise tools.

Detect Azure Lateral Movement

detecting-azure-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detect Azure AD lateral movement by correlating Microsoft Graph audit logs, Sentinel KQL analytics, and sign-in anomalies to spot service principal abuse, stolen tokens, and cross-tenant pivots, then report indicators and containment steps.

Zeek Beaconing Detection

detecting-beaconing-patterns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Zeek conn.log data with ZAT and Pandas to compute inter-arrival time statistics, flagging low-jitter periodic connections as potential C2 beaconing when hunting command-and-control callbacks.

Detecting Fileless Malware

detecting-fileless-malware-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detects fileless malware in memory by analyzing PowerShell, WMI, registry-resident payloads, and LOLBin behaviors, guiding persistence, LOLBin abuse, and memory forensics investigations when no disk artifacts exist.

UEBA Insider Threat Detection

detecting-insider-threat-with-ueba

mukul975/Anthropic-Cybersecurity-Skills

Set up UEBA in Elasticsearch/OpenSearch to model normal user and entity behavior, calculate anomaly and risk scores via peer comparisons, and surface prioritized insider threat alerts for SOC workflows.

Modbus Command Injection Detection

detecting-modbus-command-injection-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detects unauthorized Modbus TCP/RTU write operations by monitoring anomalous function codes, malformed frames, and deviations from established baselines to feed ICS SOC analysts timely alerts.

Modbus Protocol Anomaly Detection

detecting-modbus-protocol-anomalies

mukul975/Anthropic-Cybersecurity-Skills

Detects Modbus/TCP and Modbus RTU anomalies using Zeek/Suricata with OT rules and Python Markov models, covering unauthorized clients, function code violations, timing deviations, and malformed frames for OT/ICS intrusion response scenarios.

Process Injection Detection

detecting-process-injection-techniques

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware process injection techniques across DLL injection, hollowing, APC, thread hijacking, and reflective loading using memory forensics, API monitoring, and Sysmon data to help EDR/SIEM detection.

Rootkit Activity Detection

detecting-rootkit-activity

mukul975/Anthropic-Cybersecurity-Skills

Detects hidden rootkit behavior on compromised machines by combining memory forensics, cross-view process enumeration, kernel integrity checks, and file/registry hiding detection to reveal hooked system calls and covert connections.

Email Gateway Spearphishing Detection

detecting-spearphishing-with-email-gateway

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC teams through configuring Microsoft Defender, Proofpoint, Mimecast, and Barracuda email gateways to detect and block targeted spearphishing using impersonation, URL, attachment, and behavior analytics.

Stuxnet Style Detection

detecting-stuxnet-style-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detects Stuxnet-style cyber-physical campaigns by monitoring PLC logic integrity, physics-based process anomalies, engineering workstation compromise, USB-borne entry, and IT-to-OT lateral movement to surface subtle ICS manipulations.

Prev 1 2 3...21 22 232425 26 27 28 Next

Language