Download

Skill UI

Browse and discover 6152+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search investigation , found 54 results

Default Newest Most Downloaded

Elastic SIEM Alert Triage

performing-alert-triage-with-elastic-siem

mukul975/Anthropic-Cybersecurity-Skills

Guide to Elastic Security SIEM alert triage, covering initial assessment, ES|QL investigations, threat enrichment, classification, and documentation so SOC analysts can quickly classify and escalate suspicious events.

Cloud Forensics Playbook

performing-cloud-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Guides investigators through preserving evidence and analyzing logs, snapshots, and metadata across AWS, Azure, and GCP, covering breach response, IAM analysis, and incident triage in cloud environments.

Cloud Storage Forensic Acquisition

performing-cloud-storage-forensic-acquisition

mukul975/Anthropic-Cybersecurity-Skills

Collects forensic evidence from Google Drive, OneDrive, Dropbox, and Box by combining API-based acquisitions with local sync client artifact harvesting, enabling incident responders to gather remote data plus endpoint metadata for investigations.

Disk Forensics Investigation

performing-disk-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Performs full disk forensic imaging and analysis using FTK Imager, Autopsy, Sleuth Kit, and related utilities to recover deleted data, verify evidence integrity, and rebuild user or adversary timelines for incident response and legal investigations.

Endpoint Forensics Investigation

performing-endpoint-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Guides the capture and analysis of volatile and persistent data on compromised endpoints, covering memory acquisition, disk imaging, artifact parsing, and timeline reconstruction for incident response and legal evidence.

Foremost File Carving Guide

performing-file-carving-with-foremost

mukul975/Anthropic-Cybersecurity-Skills

Uses Foremost (with optional Scalpel follow-up) to carve files from raw disk images and unallocated space, customize signature configs, target specific formats, validate carved results, and assemble evidence during digital-forensics investigations.

Insider Threat Investigation

performing-insider-threat-investigation

mukul975/Anthropic-Cybersecurity-Skills

Performs comprehensive investigations into insider threat incidents by pairing digital forensics, user behavior analytics, and HR/legal coordination to validate allegations, collect covert evidence, and support security actions when employees or trusted partners misuse privileged access.

IOC Enrichment Automation

performing-ioc-enrichment-automation

mukul975/Anthropic-Cybersecurity-Skills

Automates IOC enrichment by orchestrating lookups across VirusTotal, AbuseIPDB, Shodan, MISP, GreyNoise, URLScan, and other intelligence sources for SOC triage and investigation workflows.

Lateral Movement Detection

performing-lateral-movement-detection

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement techniques such as Pass-the-Hash, PsExec, WMI, RDP, and SMB pivots through SIEM correlation of Windows event logs, network flows, and endpoint telemetry aligned with MITRE ATT&CK TA0008 for SOC response and investigation.

Linux Log Forensics Guide

performing-linux-log-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Walks through forensic investigation of Linux logs (syslog/auth.log/journal/kern.log) to reconstruct activity, detect unauthorized access, and build event timelines using shell commands and Python parsing for incident response work.

Forensic Log Analysis

performing-log-analysis-for-forensic-investigation

mukul975/Anthropic-Cybersecurity-Skills

Workflow for collecting, parsing, and correlating Windows, Linux, and web logs to rebuild timelines, surface malicious actions, and support forensic reporting during incident investigations.

Malware Persistence Analysis

performing-malware-persistence-investigation

mukul975/Anthropic-Cybersecurity-Skills

Systematically audit Windows and Linux autostart mechanisms, registry hives, scheduled tasks, and WMI entries to map how malware survives reboots and maintain access during incident response or threat hunting.

Prev 1 2 345 Next

Language