Download

Skill UI

Browse and discover 6201+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search sca , found 458 results

Default Newest Most Downloaded

Cobalt Strike Profile Analysis

analyzing-cobalt-strike-malleable-profiles

mukul975/Anthropic-Cybersecurity-Skills

Parses Cobalt Strike malleable C2 profiles via pyMalleableC2 to pull beacon configs, HTTP communication patterns, sleep/jitter settings, and combines JARM scans for C2 detection when hunting suspected infrastructure or building IDS signatures.

DNS Exfiltration Detection

analyzing-dns-logs-for-exfiltration

mukul975/Anthropic-Cybersecurity-Skills

Scans DNS query logs within SIEM platforms to flag data exfiltration by spotting suspicious tunneling subdomains, high-entropy DGA-style domains, and abnormal query volumes, helping SOC teams uncover DNS-based threats evading standard controls.

Kubernetes Audit Threat Detection

analyzing-kubernetes-audit-logs

mukul975/Anthropic-Cybersecurity-Skills

Parses Kubernetes API server audit logs (JSON lines) to detect exec-into-pod, secret access, RBAC escalations, privileged pod creation, and anonymous API calls, helping SOC analysts build SIEM rules and investigate cluster compromises.

Linux Audit Intrusion Detection

analyzing-linux-audit-logs-for-intrusion

mukul975/Anthropic-Cybersecurity-Skills

Leverages auditd with ausearch and aureport to monitor Linux system calls for unauthorized access, privilege escalation, file tampering, kernel module changes, and suspicious activity, enabling incident response and SIEM integration on hosts.

Linux Kernel Rootkit Detection

analyzing-linux-kernel-rootkits

mukul975/Anthropic-Cybersecurity-Skills

Detects Linux kernel rootkits in memory dumps by combining Volatility3 linux plugins, cross-view /proc vs /sys analysis, and rkhunter/chkrootkit scans to surface hooked syscalls, hidden modules, and tampered files.

Office Macro Malware Analysis

analyzing-macro-malware-in-office-documents

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malicious VBA macros embedded in Word, Excel, and PowerPoint files to expose download cradles, persistence mechanisms, and anti-analysis techniques using olevba, oledump, and VBA/XLM deobfuscation for thorough maldoc investigations.

Analyzing Malicious URLs with URLScan

analyzing-malicious-url-with-urlscan

mukul975/Anthropic-Cybersecurity-Skills

Guide for SOC analysts to submit suspicious links to URLScan.io, review rendered screenshots/dom/network logs, extract IOCs, and cross-reference with threat intelligence sources for phishing and credential harvesting investigations.

Network Covert Channel Analysis

analyzing-network-covert-channels-in-malware

mukul975/Anthropic-Cybersecurity-Skills

Detects DNS tunneling, ICMP exfiltration, HTTP steganography, and other protocol abuses used by malware for covert C2 or data theft, guiding analysts through scanning PCAPs, scoring domains, and flagging anomalous flows in incident response.

NetFlow-Based Traffic Analysis

analyzing-network-flow-data-with-netflow

mukul975/Anthropic-Cybersecurity-Skills

Parse NetFlow v9 and IPFIX records via Python to spot volumetric anomalies, port scans, exfiltration, and C2 beaconing, helping SOC analysts tune detections and validate monitoring coverage with statistical baselines and reports.

Scapy Packet Analysis

analyzing-network-packets-with-scapy

mukul975/Anthropic-Cybersecurity-Skills

Use Python Scapy to craft, send, sniff, and dissect network packets for protocol analysis, anomaly detection, and threat hunting workflows during authorized security assessments.

Linux Persistence Analysis

analyzing-persistence-mechanisms-in-linux

mukul975/Anthropic-Cybersecurity-Skills

Scans Linux persistence vectors such as crontabs, systemd units, LD_PRELOAD, shell startup files, and SSH keys while correlating auditd/file integrity data to prioritize findings and guide remediation.

PowerShell Script Block Analyzer

analyzing-powershell-script-block-logging

mukul975/Anthropic-Cybersecurity-Skills

Parses PowerShell Script Block Logs (Event ID 4104) from EVTX files to reconstruct obfuscated payloads, decode Base64 commands, and flag download/AMSI bypass patterns for SOC and threat hunting use.

Prev 1 2 3...22 23 242526 27 28...37 38 39 Next

Language