Download

Skill UI

Browse and discover 9630+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Alerts , found 105 results

Default Newest Most Downloaded

Ransomware Honeypot Deployment

implementing-honeypot-for-ransomware-detection

mukul975/Anthropic-Cybersecurity-Skills

Deploys honeypot shares, canary files, and Thinkst Canary appliances to detect ransomware activity early via deception alerts tied to file access and modification.

Honeytoken Breach Detection

implementing-honeytokens-for-breach-detection

mukul975/Anthropic-Cybersecurity-Skills

Deploys canary tokens and honeytokens across critical systems to trigger alerts via webhook when attackers touch fake AWS credentials, DNS entries, documents, or database records, enabling deception-based early warnings for intrusion detection teams.

Honeypot Network Deception Deployment

implementing-network-deception-with-honeypots

mukul975/Anthropic-Cybersecurity-Skills

Guide to deploying OpenCanary, Cowrie, or T-Pot honeypots to detect unauthorized access, lateral movement, and reconnaissance while forwarding alerts to a SIEM for faster incident response.

Network Traffic Baselining

implementing-network-traffic-baselining

mukul975/Anthropic-Cybersecurity-Skills

Analyzes NetFlow/IPFIX exports with Python pandas to model hourly/daily traffic baselines, per-host stats, protocol distributions, and z-score/IQR alerts so SOC teams can spot exfiltration spikes or beaconing patterns.

Datadog Cloud Security Monitoring

implementing-security-monitoring-with-datadog

mukul975/Anthropic-Cybersecurity-Skills

Implements Datadog Cloud SIEM, Cloud Security Management, and Workload Protection to ingest cloud logs, apply detection rules, and automate alerts for hybrid infrastructure threat response.

SOAR Automation With Phantom

implementing-soar-automation-with-phantom

mukul975/Anthropic-Cybersecurity-Skills

Automates SOC triage and incident response workflows by using Splunk SOAR playbooks to enrich alerts, enforce analyst gates, and orchestrate containment via tool integrations.

Incident Ticketing System

implementing-ticketing-system-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Connects SIEM alerts to ServiceNow, Jira, or TheHive so SOCs can automate incident ticket creation, assignment routing, escalations, SLA tracking, and documentation for formalized lifecycle management.

ATT&CK Coverage Mapping

mapping-mitre-attack-techniques

mukul975/Anthropic-Cybersecurity-Skills

Maps observed detection rules, Sigma or SIEM alerts, and intelligence on adversaries to MITRE ATT&CK techniques; builds Navigator heatmaps, labels assets with TIDs, and highlights coverage gaps so SOCs can prioritize controls and report threat exposure.

Falco Cloud Forensics

performing-cloud-native-forensics-with-falco

mukul975/Anthropic-Cybersecurity-Skills

Use Falco YAML rules and the Falco gRPC API to monitor syscalls and runtime behavior in containers or Kubernetes, catching shell spawns, file tampering, network anomalies, and privilege escalation while parsing alerts to support incident response and security testing.

VirusTotal Hash Enrichment

performing-malware-hash-enrichment-with-virustotal

mukul975/Anthropic-Cybersecurity-Skills

Use the VirusTotal API v3 to pull detection verdicts, sandbox behavior, YARA hits, related indicators, and threat context for malware file hashes, helping SOC analysts triage alerts and validate IOCs during response or testing.

Paste Site Credential Monitor

performing-paste-site-monitoring-for-credentials

mukul975/Anthropic-Cybersecurity-Skills

Continuously scrape Pastebin, GitHub Gists and similar paste services to detect leaked credentials or API keys through keyword alerts and regex-based pattern matching, enabling swift incident response before stolen data is weaponized.

Elastic SIEM Threat Hunting

performing-threat-hunting-with-elastic-siem

mukul975/Anthropic-Cybersecurity-Skills

Performs proactive threat hunting inside Elastic Security SIEM by crafting KQL/EQL hunting queries, translating findings into detection rules, and using Timelines to investigate anomalies that evade automated alerts.

Prev 1 2 3 456 7 8 9 Next

Language