Download

Skill UI

Browse and discover 6557+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search incident-response-incident-response , found 92 results

Default Newest Most Downloaded

Security Audit Command Center

sickn33/antigravity-awesome-skills

Provides a Chief Security Architect AI that orchestrates security audit, STRIDE/PASTA threat modeling, red/blue team checks, OWASP reviews, code inspection, incident response, and infrastructure hardening for any project.

API Gateway Threat Detection

analyzing-api-gateway-access-logs

mukul975/Anthropic-Cybersecurity-Skills

Parses API gateway logs (AWS, Kong, Nginx) via pandas to surface BOLA/IDOR scans, injection attempts, rate-limit bypasses, and credential scanning spikes, supporting SOC incident response and API threat rule building.

Browser Forensics With Hindsight

analyzing-browser-forensics-with-hindsight

mukul975/Anthropic-Cybersecurity-Skills

Use Hindsight to parse Chromium browser artifacts—history, cookies, downloads, cache, autofill, extensions, login data—into timelines or JSON/SQLite reports for incident response, threat hunting, or forensic review.

Docker Container Forensics

analyzing-docker-container-forensics

mukul975/Anthropic-Cybersecurity-Skills

Investigate compromised Docker containers by preserving evidence, analyzing image layers, examining host artifacts, and scanning for malicious changes during incident response.

Email Header Phishing Analysis

analyzing-email-headers-for-phishing-investigation

mukul975/Anthropic-Cybersecurity-Skills

Parse and validate email headers when investigating phishing incidents to trace delivery hops, confirm sender authenticity, and detect spoofing via SPF, DKIM, and DMARC checks during forensic response.

Ghidra Golang Malware Analysis

analyzing-golang-malware-with-ghidra

mukul975/Anthropic-Cybersecurity-Skills

Provides procedures and scripts for using Ghidra plus GoResolver and helper tooling to reverse engineer stripped Golang malware, recover function names, harvest Go-specific strings and dependency metadata, and support SOC incident response or threat hunting.

Linux Audit Intrusion Analysis

analyzing-linux-audit-logs-for-intrusion

mukul975/Anthropic-Cybersecurity-Skills

Uses auditd, ausearch, and aureport to spot intrusion attempts, unauthorized access, privilege escalation, suspicious processes, and tampering on Linux hosts, aiding incident response teams with timelines and compliance reporting.

LNK Jump List Analysis

analyzing-lnk-file-and-jump-list-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Guide for analyzing Windows LNK shortcuts and Jump List artifacts using tools like LECmd, JLECmd, and Python parsers to prove file access, program execution, and user activity during incident response and hunting.

Linux Memory Forensics

analyzing-memory-forensics-with-lime-and-volatility

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC analysts through acquiring Linux RAM with the LiME kernel module and analyzing it using Volatility 3 to surface processes, bash history, sockets, kernel modules, and injected code for incident response.

MFT Deleted File Recovery

analyzing-mft-for-deleted-file-recovery

mukul975/Anthropic-Cybersecurity-Skills

Analyze NTFS Master File Table records, $LogFile, $UsnJrnl, and slack space with MFTECmd/analyzeMFT/X-Ways to reconstruct metadata and recover deleted files during incident response or threat hunting.

Wireshark Traffic Analysis

analyzing-network-traffic-with-wireshark

mukul975/Anthropic-Cybersecurity-Skills

Capture and analyze network packets with Wireshark and tshark to spot malicious patterns, diagnose protocol issues, extract artifacts, and support incident response on authorized segments.

PowerShell Empire Artifact Detection

analyzing-powershell-empire-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Detects PowerShell Empire artifacts inside Windows event logs by scanning Script Block and Module Logging for known launcher strings, Base64 payloads, module invocations, user agents, and staging URLs to support incident response and hunting.

Prev 1 234 5 6 7 8 Next

Language