Download

Skill UI

Browse and discover 6044+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search threat-actor , found 7 results

Default Newest Most Downloaded

MITRE ATT&CK TTP Mapping

analyzing-threat-actor-ttps-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Map threat actors to the MITRE ATT&CK framework, build ATT&CK Navigator technique coverage layers, identify detection gaps, and link observed IOCs to adversary tactics across Enterprise, Mobile, and ICS matrices for actionable reporting.

Mapping APT TTPs With Navigator

analyzing-threat-actor-ttps-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Programmatically maps APT group tactics, techniques, and procedures to MITRE ATT&CK via attackcti and the ATT&CK Navigator, generating layer JSON files, overlaying detection coverage, and sharing visualizations for defense teams.

Analyzing Threat Landscape

analyzing-threat-landscape-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Use PyMISP to query MISP events, compute IOC type breakdowns, highlight top threat actors, MITRE techniques, and galaxy clusters, and produce temporal trend reports to help security teams understand the evolving threat landscape.

Automated IOC Enrichment

building-ioc-enrichment-pipeline-with-opencti

mukul975/Anthropic-Cybersecurity-Skills

Builds an automated pipeline on OpenCTI to enrich newly ingested IOCs with context from VirusTotal, Shodan, AbuseIPDB, GreyNoise, and other sources, correlating them with threat actors/campaigns and scoring for prioritization.

Threat Actor Profiling OSINT

building-threat-actor-profile-from-osint

mukul975/Anthropic-Cybersecurity-Skills

Use OSINT sources, Maltego/SpiderFoot, and STIX data to gather open‑source intelligence, map adversary infrastructure and TTPs, and deliver structured threat actor dossiers for proactive defense.

IDS Network Scan Detection

detecting-network-scanning-with-ids-signatures

mukul975/Anthropic-Cybersecurity-Skills

Detect reconnaissance tools such as Nmap and Masscan using Suricata/Snort IDS signatures, thresholds, and anomaly cues to alert on TCP/UDP scans, SYN/ACK probes, and other scan fingerprints before threat actors escalate.

Threat Actor Infrastructure Tracking

tracking-threat-actor-infrastructure

mukul975/Anthropic-Cybersecurity-Skills

Tracking Threat Actor Infrastructure uses Shodan, Censys, passive DNS, CT logs, WHOIS, and network fingerprinting to discover, map, and pivot across adversary-controlled servers and domains, letting analysts detect new C2 nodes and phishing sites earlier.

1

Language