Download

Skill UI

Browse and discover 6252+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search threat-intelligence , found 30 results

Default Newest Most Downloaded

Command-and-Control Analysis

analyzing-command-and-control-communication

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware command-and-control (C2) communication by profiling protocols, beaconing behavior, and payload structure to inform detection, reverse engineering, and threat intelligence workflows.

Analyzing Malicious URLs with URLScan

analyzing-malicious-url-with-urlscan

mukul975/Anthropic-Cybersecurity-Skills

Guide for SOC analysts to submit suspicious links to URLScan.io, review rendered screenshots/dom/network logs, extract IOCs, and cross-reference with threat intelligence sources for phishing and credential harvesting investigations.

MITRE Attack TTP Mapping

analyzing-threat-actor-ttps-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through locating threat actor TTPs, mapping them to the ATT&CK framework, generating Navigator coverage layers, and producing intelligence summaries to validate detection coverage.

Automated IOC Enrichment

automating-ioc-enrichment

mukul975/Anthropic-Cybersecurity-Skills

Automates IOC enrichment by orchestrating multi-source threat intelligence via SOAR playbooks or Python pipelines so SIEM alerts, email submissions, and bulk feeds pre-populate analyst context with VirusTotal, Shodan, MISP, AbuseIPDB, and TIP data.

Attack Pattern Library Builder

building-attack-pattern-library-from-cti-reports

mukul975/Anthropic-Cybersecurity-Skills

Parses cyber threat intelligence reports to extract adversary behaviors, map them to MITRE ATT&CK techniques, and assemble STIX 2.1 attack pattern objects so detection engineers can catalog tactics, techniques, and actors for rule generation.

Sigma Detection Rule Builder

building-detection-rules-with-sigma

mukul975/Anthropic-Cybersecurity-Skills

Creates portable Sigma detection rules from threat intelligence, validating syntax and converting to Splunk, Elastic, or Sentinel queries so SOC teams can map rules to MITRE ATT&CK and reuse them in CI/CD pipelines.

Threat Actor Profiling OSINT

building-threat-actor-profile-from-osint

mukul975/Anthropic-Cybersecurity-Skills

Build detailed threat actor dossiers by aggregating OSINT sources, linking infrastructure through Maltego/SpiderFoot, mapping MITRE ATT&CK TTPs, and surfacing intelligence that informs proactive defense decisions.

MISP Threat Feed Aggregation

building-threat-feed-aggregation-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Deploy MISP via Docker to aggregate, correlate, and share threat intelligence feeds from OSINT, commercial, and community sources, enabling centralized IOC management and automated SIEM/SOAR integrations.

Threat Hunt Hypothesis

building-threat-hunt-hypothesis-framework

mukul975/Anthropic-Cybersecurity-Skills

Establishes a systematic process that turns threat intelligence, ATT&CK gaps, and telemetry into testable hunting hypotheses, guiding analysts through data selection, query execution, and reporting for proactive detection and response.

Splunk Threat Intelligence Enrichment

building-threat-intelligence-enrichment-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Build automated threat intelligence enrichment pipelines in Splunk Enterprise Security by ingesting modular inputs, normalizing indicators into KV Store lookups, and correlating them with events to accelerate SOC triage.

Threat Intelligence Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion, normalization, scoring, and distribution of STIX/TAXII and open-source threat feeds so SOCs can match IOCs in real time across SIEM and detection tools.

Threat Intelligence Platform Build

building-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Designs and deploys a unified threat intelligence platform using MISP, OpenCTI, TheHive, and Cortex to collect, enrich, analyze, and share CTI data via STIX/TAXII feeds, enabling compliance-friendly incident response and SOC workflows.

Language