Download

Skill UI

Browse and discover 6069+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search investigation , found 50 results

Default Newest Most Downloaded

Office Macro Malware Analysis

analyzing-macro-malware-in-office-documents

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malicious VBA macros embedded in Word, Excel, and PowerPoint files to expose download cradles, persistence mechanisms, and anti-analysis techniques using olevba, oledump, and VBA/XLM deobfuscation for thorough maldoc investigations.

URLScan Phishing Analysis

analyzing-malicious-url-with-urlscan

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through URLScan.io’s interface and API to safely render suspicious links, capture screenshots, inspect DOM/network logs, and automate IOC extraction for phishing investigations.

Office365 Audit Compromise

analyzing-office365-audit-logs-for-compromise

mukul975/Anthropic-Cybersecurity-Skills

Use Microsoft Graph to parse Office 365 Unified Audit Logs, enumerate inbox rules, spotting forwarding, delegation, OAuth grants, and other indicators of business email compromise for detection and investigation workflows.

Outlook PST Forensic Analysis

analyzing-outlook-pst-for-email-forensics

mukul975/Anthropic-Cybersecurity-Skills

Extract forensic evidence from Outlook PST/OST archives using libpff-based tooling and Python scripts to recover deleted items, headers, attachments, and metadata for incident response and legal investigations.

USB Connection History Analysis

analyzing-usb-device-connection-history

mukul975/Anthropic-Cybersecurity-Skills

Analyzes USB device connection history from Windows registry, event logs, and setupapi logs to trace removable media usage, correlate drive assignments, and support forensic or insider-threat investigations.

Splunk Windows Threat Detection

analyzing-windows-event-logs-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Runs SPL queries against Windows Security, System, and Sysmon logs in Splunk to flag authentication attacks, privilege escalations, persistence, and lateral movement, helping SOC analysts, detection engineers, and responders build investigations and timelines.

Windows Registry Artifact Analysis

analyzing-windows-registry-for-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract and examine Windows Registry hives from forensic images to reveal installed software, autorun entries, USB history, and user activity, supporting incident response or insider threat investigations with RegRipper, python-registry, and hash validation workflows.

Timesketch Incident Timeline

building-incident-timeline-with-timesketch

mukul975/Anthropic-Cybersecurity-Skills

Leverage Timesketch to ingest multi-source logs via Plaso or CSV/JSONL, normalize them into searchable timelines, and collaboratively reconstruct attack chains with analyzers, tagging, and story-building for thorough incident investigations.

Anomalous Authentication Detection

detecting-anomalous-authentication-patterns

mukul975/Anthropic-Cybersecurity-Skills

Detects anomalous authentication patterns via UEBA, statistical baselines, and machine learning to flag impossible travel, credential stuffing, brute force, and compromised account behavior across authentication logs for SOC investigations.

Detect Azure SP Abuse

detecting-azure-service-principal-abuse

mukul975/Anthropic-Cybersecurity-Skills

Guides defenders through detecting and investigating Azure service principal abuse—ranging from unauthorized credential additions and privileged role grants to admin consent bypass and OAuth escalation—using Sentinel/Splunk queries and Graph-powered investigation steps.

Evasion Detection Toolkit

detecting-evasion-techniques-in-endpoint-logs

mukul975/Anthropic-Cybersecurity-Skills

Guides security analysts through endpoint log use cases for detecting defense evasion tactics such as log tampering, timestomping, process injection, masquerading, LOLBin abuse, and security tool disabling to support hunting, rule development, and investigation aligned with MITRE ATT&CK TA0005.

Detecting Fileless Malware

detecting-fileless-malware-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detects fileless malware in memory by analyzing PowerShell, WMI, registry-resident payloads, and LOLBin behaviors, guiding persistence, LOLBin abuse, and memory forensics investigations when no disk artifacts exist.

Prev 123 4 5 Next

Language