Download

Skill UI

Browse and discover 6556+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search incident-response-incident-response , found 92 results

Default Newest Most Downloaded

Lateral Movement Detection

detecting-lateral-movement-in-network

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement across enterprise networks by correlating Windows security logs, Zeek flow/SMB traces, and SIEM rules to flag Pass-the-Hash, PsExec, and RDP pivots during incident response and hunting.

Living Off The Land Detection

detecting-living-off-the-land-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detect suspicious use of legitimate Windows binaries to surface living-off-the-land attacks by correlating Sysmon process/network events, SIEM/Sigma rules, and telemetry; ideal for crafting detection rules, hunting fileless threats, and tuning whitelists or incident responses.

Mobile Malware Behavior

detecting-mobile-malware-behavior

mukul975/Anthropic-Cybersecurity-Skills

Analyzes suspicious mobile apps by correlating static indicators, automated MobSF reports, network captures, and Frida instrumentation to surface permission abuse, data exfiltration, and command-and-control behavior during incident response or triage.

Zeek Network Anomaly Detection

detecting-network-anomalies-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Deploys Zeek as a passive network security monitor to capture traffic at chokepoints, produce structured logs, and run custom detection scripts for anomalies, enabling SIEM ingestion and threat hunting during incident response.

S3 Exfiltration Detection

detecting-s3-data-exfiltration-attempts

mukul975/Anthropic-Cybersecurity-Skills

Detect unauthorized bulk downloads and cross-account transfers from AWS S3 by correlating CloudTrail data events, VPC flow logs, GuardDuty findings, Macie alerts, and access patterns to support security monitoring and incident response.

Memory Dump Credential Extraction

extracting-credentials-from-memory-dump

mukul975/Anthropic-Cybersecurity-Skills

Extract credentials, hashes, tickets, and tokens from memory dumps using Volatility, Mimikatz, and pypykatz for deep incident response and compromise assessment workflows.

Data Exfiltration Hunt

hunting-for-data-exfiltration-indicators

mukul975/Anthropic-Cybersecurity-Skills

Hunt for data exfiltration indicators by analyzing network traffic, baselining outbound volumes, correlating with file access, and flagging anomalous destinations or protocol abuse to support incident response.

CloudTrail Log Analysis

implementing-cloud-trail-log-analysis

mukul975/Anthropic-Cybersecurity-Skills

Implements AWS CloudTrail log analysis pipelines using Athena queries, CloudWatch Logs Insights, and SIEM feeds to detect unauthorized access, privilege escalation, and tampering across AWS accounts for incident response and compliance.

OT Incident Response Playbook

implementing-ot-incident-response-playbook

mukul975/Anthropic-Cybersecurity-Skills

Develops OT incident response playbooks that pair SANS PICERL with IEC 62443 and NIST SP 800-82 so SOC, OT engineering, and plant operations can contain, eradicate, and recover from safety-critical ICS threats like ransomware.

SOAR Automation With Phantom

implementing-soar-automation-with-phantom

mukul975/Anthropic-Cybersecurity-Skills

Automates SOC alert triage, IOC enrichment, containment, and incident response playbooks through Splunk SOAR (Phantom) workflows, letting teams reduce manual work, enforce analyst reviews, and orchestrate tool integrations for consistent, faster response.

Automating Phishing SOAR

implementing-soar-playbook-for-phishing

mukul975/Anthropic-Cybersecurity-Skills

Automates phishing incident response by parsing reported emails, creating Splunk SOAR containers and artifacts, triggering investigation playbooks, and polling REST API action results so external tools can orchestrate triage.

XSOAR SOAR Playbook Builder

implementing-soar-playbook-with-palo-alto-xsoar

mukul975/Anthropic-Cybersecurity-Skills

Implement automated incident response playbooks in Cortex XSOAR to orchestrate SOC tools, enrich threat data, and accelerate phishing and containment workflows while reducing manual response time.

Prev 1 2 3 456 7 8 Next

Language