Download

Skill UI

Browse and discover 6011+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search threat-intelligence , found 25 results

Default Newest Most Downloaded

Zeek DNS Tunneling Hunt

hunting-for-dns-tunneling-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Detect DNS tunneling data exfiltration by analyzing Zeek dns.log for high-entropy subdomains, long queries, unusual record types, and elevated volume, correlating with connection metadata and threat intelligence.

Diamond Model Analysis

implementing-diamond-model-analysis

mukul975/Anthropic-Cybersecurity-Skills

Implements the Diamond Model of Intrusion Analysis in Python, letting you capture adversaries, capabilities, infrastructure, and victims, link events chronologically, surface pivots, and prep MITRE ATT&CK–mapped intelligence for threat teams.

Dragos OT Monitoring Deployment

implementing-dragos-platform-for-ot-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure the Dragos Platform to monitor OT networks with industrial protocol parsing, intelligence-driven threat detection, asset visibility, and SIEM integration for ICS-focused SOCs.

Proofpoint Email Security

implementing-proofpoint-email-security-gateway

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure Proofpoint Email Protection as a secure gateway that filters inbound and outbound mail, stops phishing, malware, BEC, and spam, and incorporates URL rewriting, sandboxing, and threat intelligence for enterprise compliance.

STIX 2.1 Threat Sharing

implementing-security-information-sharing-with-stix2

mukul975/Anthropic-Cybersecurity-Skills

Build, validate, and publish structured threat intelligence by modeling indicators, malware, campaigns, and relationships with the stix2 Python library, then share them over the TAXII 2.1 transport protocol.

Threat Intelligence Lifecycle

implementing-threat-intelligence-lifecycle-management

mukul975/Anthropic-Cybersecurity-Skills

Guides building a structured CTI lifecycle—from requirements and collection to analysis, dissemination, and feedback—so teams can operationalize intelligence for informed decisions.

MISP Threat Intelligence

implementing-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Build a PyMISP-driven threat intelligence platform that ingests multiple IOC feeds, tags MITRE ATT&CK techniques, enriches data via VirusTotal and AbuseIPDB, and exports STIX 2.1 bundles for SIEM pipelines.

MITRE ATT&CK Threat Modeling

implementing-threat-modeling-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Orchestrates MITRE ATT&CK-based threat modeling so SOC teams can map adversary TTPs, assess detection gaps, and prioritize defenses or procurement decisions with context-aware intelligence.

Elastic SIEM Alert Triage

performing-alert-triage-with-elastic-siem

mukul975/Anthropic-Cybersecurity-Skills

Outlines a structured workflow inside Elastic Security SIEM for SOC analysts to triage alerts, investigate related activity with ES|QL queries, enrich findings via threat intelligence, and document escalation steps so teams can prioritize real threats and reduce noise.

Brand Impersonation Monitoring

performing-brand-monitoring-for-impersonation

mukul975/Anthropic-Cybersecurity-Skills

Detect and respond to brand impersonation across domains, social media, mobile apps, and the dark web by combining automated scanning, risk prioritization, and threat intelligence to reveal phishing campaigns, fake profiles, and unauthorized asset use.

SIEM False Positive Reduction

performing-false-positive-reduction-in-siem

mukul975/Anthropic-Cybersecurity-Skills

Systematically reduce SIEM false positives through rule tuning, thresholds, correlation, allowlists, and threat intelligence enrichment while validating with Atomic Red Team runs and metrics to keep SOC analysts focused on true threats.

Shodan IP Reputation Analysis

performing-ip-reputation-analysis-with-shodan

mukul975/Anthropic-Cybersecurity-Skills

Use the Shodan API and InternetDB to enrich IP security alerts, inspect open ports/services, flag CVE-linked vulnerabilities, and score reputation for SOC triage and threat intelligence workflows.

Language