Download

Skill UI

Browse and discover 6557+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search ATT&CK , found 36 results

Default Newest Most Downloaded

Red Team Tactics Guide

red-team-tactics

sickn33/antigravity-awesome-skills

Provides MITRE ATT&CK-based red team principles covering reconnaissance, access, escalation, evasion, movement, reporting, and ethics to guide authorized adversary simulations and defensive validation.

MITRE Navigator APT Heatmaps

analyzing-apt-group-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Automate ATT&CK data queries and MITRE Navigator layer creation to visualize APT group techniques, compare overlays, and expose detection gaps for threat-informed defense.

Cyber Kill Chain Analyzer

analyzing-cyber-kill-chain

mukul975/Anthropic-Cybersecurity-Skills

Analyzes intrusion activity against the Lockheed Martin Cyber Kill Chain to highlight which phases attackers completed, where detections succeeded or failed, and which defenses could have stopped them earlier; useful for post-incident reviews, prevention planning, or communicating attack progress with MITRE mapping.

Mapping Threat Actor Techniques

analyzing-threat-actor-ttps-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Guided workflow for analysts to map threat actor behaviors to MITRE ATT&CK, visualize coverage with ATT&CK Navigator layers, identify detection gaps, and generate actionable intelligence reports leveraging attackcti, stix2, and Navigator tooling.

Threat Actor TTP Mapping

analyzing-threat-actor-ttps-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Generate MITRE ATT&CK Navigator layers for threat actor TTPs using attackcti STIX queries; visualize technique coverage, compare adversary profiles, and highlight defensive gaps when triaging incidents or planning detection and hunting work.

Windows Event Log Analysis

analyzing-windows-event-logs-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Detect Windows authentication attacks, privilege escalation, persistence, and lateral movement by running Splunk SPL queries mapped to MITRE ATT&CK techniques, supporting SOC hunting and forensic investigations.

Attack Pattern Library Builder

building-attack-pattern-library-from-cti-reports

mukul975/Anthropic-Cybersecurity-Skills

Extract adversary behaviors from CTI reports, normalize them into STIX 2.1 attack patterns, and assemble a searchable MITRE ATT&CK–aligned library to drive detection engineering output such as Sigma or YARA templates.

Sigma Detection Rule Crafting

building-detection-rules-with-sigma

mukul975/Anthropic-Cybersecurity-Skills

Creates portable Sigma-based detection rules and converts them into Splunk, Elastic, or Sentinel queries, letting SOC teams map threat intelligence to ATT&CK techniques and pipeline detection-as-code workflows.

SOC Metrics KPI Dashboards

building-soc-metrics-and-kpi-tracking

mukul975/Anthropic-Cybersecurity-Skills

Builds SOC performance dashboards that track MTTD, MTTR, alert quality ratios, analyst productivity, and ATT&CK coverage using SIEM, ticketing, and staffing data to give leadership operational visibility and executive reporting.

Ransomware SOC Playbook

building-soc-playbook-for-ransomware

mukul975/Anthropic-Cybersecurity-Skills

Creates a structured SOC incident response playbook for ransomware, guiding detection rules, triage decision trees, containment, and recovery aligned with NIST SP 800-61 and MITRE ATT&CK.

OSINT Threat Actor Profiling

building-threat-actor-profile-from-osint

mukul975/Anthropic-Cybersecurity-Skills

Build comprehensive threat actor dossiers by aggregating OSINT sources, linking infrastructure with Maltego/SpiderFoot, and mapping TTPs to MITRE ATT&CK for proactive defense and attribution.

Cloud Penetration Testing

conducting-cloud-penetration-testing

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized penetration testing of AWS, Azure, and GCP environments, covering scoping via the shared responsibility model, cloud-specific tooling (Pacu, ScoutSuite, CloudFox), IAM escalation paths, SSRF abuse of metadata services, and reporting aligned to the MITRE ATT&CK Cloud matrix for realistic validation.

Language