Download

Skill UI

Browse and discover 6186+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search persistence , found 24 results

Default Newest Most Downloaded

Windows Event Log Forensics

extracting-windows-event-logs-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract, parse, and analyze EVTX files with Chainsaw, Hayabusa, and EvtxECmd to uncover lateral movement, persistence, and privilege escalation during incident response and forensic investigations.

WMI Subscription Persistence

hunting-for-persistence-via-wmi-subscriptions

mukul975/Anthropic-Cybersecurity-Skills

Guide to hunting WMI-based persistence by monitoring Sysmon and Windows WMI subscription creation events, enumerating dangerous filters and consumers, analyzing triggers, and correlating WmiPrvSe.exe activity and MOF compilation to detect stealthy threats.

Registry Run Key Hunting

hunting-for-registry-run-key-persistence

mukul975/Anthropic-Cybersecurity-Skills

Guides threat hunters through analyzing Sysmon Event ID 13 and related events to detect MITRE ATT&CK T1547.001 registry Run key persistence, highlighting suspicious paths, LOLBin usage, encoded scripts, and how to escalate findings into Sigma/Splunk rules.

Scheduled Task Persistence Hunt

hunting-for-scheduled-task-persistence

mukul975/Anthropic-Cybersecurity-Skills

Hunt for adversary persistence via Windows Scheduled Tasks by analyzing creation events, suspicious task actions, and unusual scheduling patterns across EDR and SIEM telemetry to validate detections and inform incident response.

Startup Folder Persistence Detection

hunting-for-startup-folder-persistence

mukul975/Anthropic-Cybersecurity-Skills

Detect Windows startup folder persistence by scanning user and system autostart directories, flagging suspicious file types, monitoring real-time changes via Python watchdog, and generating T1547.001-aligned threat hunting reports for incident responders.

Hunt Unusual Service Installs

hunting-for-unusual-service-installations

mukul975/Anthropic-Cybersecurity-Skills

Detect suspicious Windows service installations by parsing System event logs for Event ID 7045, analyzing service binaries and paths, and highlighting persistence indicators tied to MITRE ATT&CK T1543.003 for focused SOC response.

Osquery Endpoint Monitoring Setup

implementing-osquery-for-endpoint-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Automate the deployment of osquery scheduled queries to continuously monitor endpoints, covering process inventory, network listeners, file integrity, and persistence mechanisms; generate osquery.conf, configure differential logging, analyze suspicious results, and produce a security report.

Laravel TDD Workflow

affaan-m/everything-claude-code

Guides Laravel TDD using PHPUnit and Pest, covering unit, feature, and integration layers, database strategies like RefreshDatabase/DatabaseTransactions, and factory/fake techniques for reliable coverage in new features, bug fixes, and persistence checks.

Active Directory Compromise Investigation

performing-active-directory-compromise-investigation

mukul975/Anthropic-Cybersecurity-Skills

Guides incident responders through investigating Active Directory compromises by analyzing authentication logs, replication metadata, Group Policy changes, Kerberos anomalies, and privileged group edits to reconstruct attack chains and persistence.

Malware Persistence Analysis

performing-malware-persistence-investigation

mukul975/Anthropic-Cybersecurity-Skills

Systematically audit Windows and Linux autostart mechanisms, registry hives, scheduled tasks, and WMI entries to map how malware survives reboots and maintain access during incident response or threat hunting.

Ghidra Malware Reverse Engineering

reverse-engineering-malware-with-ghidra

mukul975/Anthropic-Cybersecurity-Skills

Disassemble and decompile suspicious binaries with Ghidra to understand malware logic, C2 protocols, encryption routines, and persistence mechanisms for detailed threat analysis.

Hexagonal Architecture Pattern

hexagonal-architecture

affaan-m/everything-claude-code

Guides building and refactoring services via the Hexagonal (Ports & Adapters) architecture so business logic stays independent of frameworks, transports, and persistence while orchestrating use cases across TypeScript, Java, Kotlin, or Go stacks.

Language