Download

Skill UI

Browse and discover 6556+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search stix , found 14 results

Default Newest Most Downloaded

Mapping Threat Actor Techniques

analyzing-threat-actor-ttps-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Guided workflow for analysts to map threat actor behaviors to MITRE ATT&CK, visualize coverage with ATT&CK Navigator layers, identify detection gaps, and generate actionable intelligence reports leveraging attackcti, stix2, and Navigator tooling.

Threat Actor TTP Mapping

analyzing-threat-actor-ttps-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Generate MITRE ATT&CK Navigator layers for threat actor TTPs using attackcti STIX queries; visualize technique coverage, compare adversary profiles, and highlight defensive gaps when triaging incidents or planning detection and hunting work.

Threat Feed Analysis

analyzing-threat-intelligence-feeds

mukul975/Anthropic-Cybersecurity-Skills

Analyzes structured and unstructured threat intelligence feeds, normalizes IOCs into STIX 2.1, enriches them with context, and distributes vetted indicators to SIEM/EDR tooling when ingesting commercial or OSINT sources.

Attack Pattern Library Builder

building-attack-pattern-library-from-cti-reports

mukul975/Anthropic-Cybersecurity-Skills

Extract adversary behaviors from CTI reports, normalize them into STIX 2.1 attack patterns, and assemble a searchable MITRE ATT&CK–aligned library to drive detection engineering output such as Sigma or YARA templates.

IOC Defang Sharing Pipeline

building-ioc-defanging-and-sharing-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Automates ingesting raw IOCs, normalizing and defanging them, converting into STIX 2.1 indicators, and distributing via TAXII/MISP/email so analysts can safely share threat data.

Threat Intelligence Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion of STIX/TAXII and open-source threat feeds into SIEM and detection platforms, normalizing, deduplicating, and scoring IOCs so SOC teams can match indicators in real time.

Collecting IOCs

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Systematically gather, enrich, score, and share indicators of compromise (IOCs) from network, host, email, and behavioral evidence to support incident response, detection tuning, and intelligence dissemination using STIX/TAXII and threat platforms.

STIX 2.1 Threat Sharing

implementing-security-information-sharing-with-stix2

mukul975/Anthropic-Cybersecurity-Skills

Use the stix2 Python library to craft, validate, and bundle STIX 2.1 SDOs/SROs, enrich indicators with malware and campaign context, and publish via TAXII 2.1 so SIEMs and SOARs can consume shared intelligence.

STIX TAXII Feed Integration

implementing-stix-taxii-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Implements STIX/TAXII 2.1 feed consumer and producer flows in Python, covering server discovery, collection polling, STIX parsing, and SIEM/TIP integration for cyber threat intelligence deployments.

OpenTAXII TAXII Server

implementing-taxii-server-with-opentaxii

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure an OpenTAXII TAXII 2.1 server to share STIX 2.1 threat intelligence, define collections, publish bundles, and integrate with SIEM/SOAR tools for automated indicator exchange and compliance-ready security architecture.

MISP Threat Intelligence

implementing-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Build a PyMISP-driven threat intelligence platform that ingests multiple IOC feeds, tags MITRE ATT&CK techniques, enriches data via VirusTotal and AbuseIPDB, and exports STIX 2.1 bundles for SIEM pipelines.

Malware IOC Extraction

performing-malware-ioc-extraction

mukul975/Anthropic-Cybersecurity-Skills

Extracts actionable malware indicators—hashes, network cues, registry/mutex info—via PE static parsing, sandbox detonation, YARA automation, and STIX 2.1 formatting for sharing during threat intelligence and incident response.

Language