Download

Skill UI

Browse and discover 9688+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search ATT&CK , found 30 results

Default Newest Most Downloaded

MITRE ATT&CK Red Team Tactics Guide

red-team-tactics

sickn33/antigravity-awesome-skills

A comprehensive guide detailing red team tactics based on the MITRE ATT&CK framework. It covers the entire adversary lifecycle, including reconnaissance, initial access, privilege escalation, defense evasion, lateral movement, and exfiltration. This skill is designed for authorized security assessments to simulate real-world threats and identify critical defensive gaps.

APT Navigator Analysis

analyzing-apt-group-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Use the MITRE ATT&CK Navigator APIs to query APT group TTPs, build layered heatmaps, and expose detection gaps so hunting and detection engineering teams can prioritize defenses.

Threat Actor ATT&CK Mapping

analyzing-threat-actor-ttps-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Automates mapping threat actor behaviors to MITRE ATT&CK, builds Navigator heatmaps to highlight detection gaps, and generates structured IOC-backed intelligence for SOC analysts and hunters.

MITRE Navigator TTP Mapping

analyzing-threat-actor-ttps-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Leverage attackcti to pull ATT&CK STIX/TAXII data, correlate APT group techniques, generate MITRE Navigator layer files, and compare defensive coverage to highlight detection gaps.

Attack Pattern Library Builder

building-attack-pattern-library-from-cti-reports

mukul975/Anthropic-Cybersecurity-Skills

Extracts adversary behaviors from CTI reports, maps them to MITRE ATT&CK IDs, and compiles STIX-based attack-pattern records so defenders can query tactics/techniques and generate detection templates.

Sigma Detection Rule Builder

building-detection-rules-with-sigma

mukul975/Anthropic-Cybersecurity-Skills

Helps SOC teams author portable Sigma detection rules, validate syntax, and convert them into Splunk, Elastic, or Sentinel queries while tagging MITRE ATT&CK coverage.

Ransomware SOC Response Playbook

building-soc-playbook-for-ransomware

mukul975/Anthropic-Cybersecurity-Skills

Creates a structured SOC incident response playbook for ransomware, detailing SIEM rules, containment, triage decision trees, and recovery steps aligned with NIST SP 800-61 and MITRE ATT&CK.

OSINT Threat Actor Profiling

building-threat-actor-profile-from-osint

mukul975/Anthropic-Cybersecurity-Skills

Aggregates public intelligence sources, vendor reports, and link-analysis tools like Maltego and SpiderFoot to craft structured threat actor dossiers, map TTPs via ATT&CK, and inform proactive defense and attribution workflows.

Cloud Penetration Testing Guide

conducting-cloud-penetration-testing

mukul975/Anthropic-Cybersecurity-Skills

Provides structured methodologies for authorized AWS, Azure, and GCP penetration tests, covering scoping, reconnaissance, IAM privilege escalation, SSRF-to-metadata validation, and MITRE ATT&CK Cloud reporting.

Full-Scope Red Teaming

conducting-full-scope-red-team-engagement

mukul975/Anthropic-Cybersecurity-Skills

Guides planning and executing MITRE ATT&CK-aligned red team engagements from reconnaissance through reporting, emphasizing stealthy payloads, lateral movement, defined objectives like domain dominance and data exfiltration, and the legal/prerequisite controls needed to validate detection and response readiness.

Detecting WMI Persistence for Threat Hunting

detecting-wmi-persistence

mukul975/Anthropic-Cybersecurity-Skills

This guide details methods for detecting WMI event subscription persistence, a common technique used by adversaries (MITRE ATT&CK T1546.003). It focuses on analyzing Sysmon Event IDs 19, 20, and 21 to identify malicious EventFilters, EventConsumers, and their bindings. Use this technique during incident response or threat hunting to uncover hidden persistence mechanisms within Windows environments.

Hunt Advanced Persistent Threats

hunting-advanced-persistent-threats

mukul975/Anthropic-Cybersecurity-Skills

Proactively hunt for Advanced Persistent Threats (APTs) by building hypothesis-driven searches across telemetry, network logs, and memory artifacts, using MITRE ATT&CK, Velociraptor, osquery, Zeek, and Sigma-compatible playbooks to validate or rule out known TTPs.

Language