Download

Skill UI

Browse and discover 6186+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search lateral-movement , found 27 results

Default Newest Most Downloaded

Active Directory Offense Guide

active-directory-attacks

sickn33/antigravity-awesome-skills

Provides offensive operators with a full Active Directory attack playbook covering reconnaissance, credential harvesting, Kerberos abuses, lateral movement, privilege escalation, and persistence tools for red team and penetration engagements.

Network Incident Traffic Analysis

analyzing-network-traffic-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Analyzes PCAP captures, Zeek logs, and NetFlow flow data to uncover command-and-control, lateral movement, and exfiltration during security incidents; supports packet-level validation and IOC extraction for triage and response teams.

Malware Network Traffic Analysis

analyzing-network-traffic-of-malware

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware-generated network traffic from sandbox or incident captures using Wireshark, Zeek, and Suricata to highlight C2 protocols, data exfiltration paths, lateral movement hints, and detection signature opportunities.

Splunk Windows Threat Detection

analyzing-windows-event-logs-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Runs SPL queries against Windows Security, System, and Sysmon logs in Splunk to flag authentication attacks, privilege escalations, persistence, and lateral movement, helping SOC analysts, detection engineers, and responders build investigations and timelines.

Splunk SPL Detection Rules

building-detection-rule-with-splunk-spl

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC teams through writing Splunk Enterprise Security correlation searches with SPL to detect brute force attacks, lateral movement, data exfiltration, PowerShell abuse, and other threats while outlining the disciplined build/test process.

Microsegmentation Zero Trust

configuring-microsegmentation-for-zero-trust

mukul975/Anthropic-Cybersecurity-Skills

Guide to architecting and implementing microsegmentation policies so workloads only communicate over approved channels, using tools like VMware NSX, Illumio, and Calico to prevent lateral movement in zero trust environments.

Active Breach Containment

containing-active-breach

mukul975/Anthropic-Cybersecurity-Skills

Executes containment strategies to halt active adversary behavior during confirmed breaches by segmenting the network, isolating endpoints, revoking credentials, and tightening access controls to prevent lateral movement and ongoing damage.

Azure Lateral Movement Detection

detecting-azure-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detects Azure AD/Entra ID lateral movement by correlating Graph API audit logs, Sentinel KQL rules, and sign-in anomalies to flag privilege escalation, token theft, and cross-tenant pivots, then automates containment.

Lateral Movement Detection

detecting-lateral-movement-in-network

mukul975/Anthropic-Cybersecurity-Skills

Analyzes authentication logs, SMB flows, RDP sessions, and Zeek data to spot MITRE ATT&CK lateral movement techniques, powering SIEM alerts, hunting, and post-compromise investigations in enterprise networks.

Service Account Abuse Detection

detecting-service-account-abuse

mukul975/Anthropic-Cybersecurity-Skills

Provides a detection workflow for service account abuse by leveraging EDR and SIEM telemetry to hunt for anomalous logons, lateral movement, privilege escalation, and unauthorized access, aiding proactive hunting, incident response, and purple team exercises.

Detecting Stuxnet Attacks

detecting-stuxnet-style-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detect Stuxnet-style multi-stage OT attacks by monitoring PLC logic integrity, engineering workstations, USB vectors, IT-to-OT lateral movement, and physics-based process anomalies to thwart nation-state level threats.

EDR Credential Dumping Detection

detecting-t1003-credential-dumping-with-edr

mukul975/Anthropic-Cybersecurity-Skills

Detects credential dumping T1003 activity by correlating EDR telemetry, Sysmon process access, and Windows security events to flag suspicious LSASS, SAM, NTDS, and cached credential access, guiding SOCs through containment and lateral movement analysis.

Language