Download

Skill UI

Browse and discover 10582+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Attack Pattern , found 31 results

Default Newest Most Downloaded

API Security Best Practices Guide

api-security-best-practices

sickn33/antigravity-awesome-skills

A comprehensive guide for developers on building secure and robust APIs across REST, GraphQL, and WebSocket protocols. It covers essential security patterns including robust authentication (JWT, OAuth 2.0), granular authorization (RBAC), input validation to prevent injection attacks (SQLi, XSS), rate limiting, and best practices for data encryption and secure headers. Essential for developers preparing for security audits.

Docker Containerization and DevOps Expert

sickn33/antigravity-awesome-skills

This expert provides advanced, practical knowledge across the entire lifecycle of containerized applications. Core expertise includes multi-stage Dockerfile optimization, container security hardening (non-root users, minimal attack surface), and advanced orchestration using patterns like Docker Compose. Ideal for ensuring robust, secure, and production-ready deployments.

GitHub Actions Security Vulnerability Audit

gha-security-review

sickn33/antigravity-awesome-skills

A rigorous framework designed to audit GitHub Actions workflows for exploitable security vulnerabilities. This skill focuses strictly on real-world attack patterns, requiring every identified finding to include a concrete exploitation scenario (Entry Point, Payload, Impact). Ideal for securing CI/CD pipelines against external attackers.

Detecting Heap Spray Attacks with Volatility3

analyzing-heap-spray-exploitation

mukul975/Anthropic-Cybersecurity-Skills

This skill provides a comprehensive guide to detecting and analyzing heap spray exploitation techniques from raw memory dumps. Utilizing Volatility3's advanced plugins (such as malfind and vadinfo), users can identify key forensic artifacts like NOP sled patterns, suspicious executable memory regions, and embedded shellcode. It is essential for malware analysts and digital forensics investigators conducting incident response.

Extracting Attack Patterns From CTI Reports

building-attack-pattern-library-from-cti-reports

mukul975/Anthropic-Cybersecurity-Skills

This skill automates the process of parsing Cyber Threat Intelligence (CTI) reports to extract adversary behaviors. It maps these behaviors to MITRE ATT&CK techniques and structures them as STIX 2.1 Attack Pattern objects. The resulting library supports detection engineering by generating rule templates (Sigma, YARA) for proactive defense and threat-informed security control implementation.

Building Threat Hunt Hypothesis Framework

building-threat-hunt-hypothesis-framework

mukul975/Anthropic-Cybersecurity-Skills

This framework provides a systematic methodology for cybersecurity professionals to transform raw threat intelligence, observed attack patterns, and environmental telemetry into verifiable, testable hunting hypotheses. It guides the end-to-end process, from hypothesis formulation and data identification across SIEM/EDR systems, to deep correlation and reporting, enabling proactive threat detection and scope assessment.

Detecting Anomalous Authentication Patterns

detecting-anomalous-authentication-patterns

mukul975/Anthropic-Cybersecurity-Skills

Utilizes User and Entity Behavior Analytics (UEBA), statistical baselines, and machine learning models to monitor authentication logs. This skill identifies sophisticated security threats such as impossible travel, credential stuffing, brute force attacks, and compromised accounts in real-time. Essential for security operations and identity access management.

Detecting API Enumeration And BOLA Attacks

detecting-api-enumeration-attacks

mukul975/Anthropic-Cybersecurity-Skills

This tool provides structured guidelines and detection rules for identifying API enumeration attacks, including Broken Object Level Authorization (BOLA) and IDOR. It monitors API access logs for suspicious patterns, such as rapid sequential requests to resource identifiers, unusual status code mixes (200/403/401), and excessive attempted resource IDs, helping security teams validate API security coverage.

Detecting Attacks on OT Historian Servers

detecting-attacks-on-historian-servers

mukul975/Anthropic-Cybersecurity-Skills

This skill monitors critical OT historian servers (such as OSIsoft PI and Ignition) located at the IT/OT boundary. It is designed to detect sophisticated cyber threats, including unauthorized access attempts, data manipulation, suspicious query patterns, and indicators of lateral movement between enterprise and control networks. Use it to validate data integrity and respond to potential ICS security incidents.

AI Detection of Business Email Compromise

detecting-business-email-compromise-with-ai

mukul975/Anthropic-Cybersecurity-Skills

This system deploys advanced AI, NLP, and behavioral analytics to detect sophisticated Business Email Compromise (BEC) attacks. Unlike traditional filters that rely on malicious links, this solution analyzes writing style, tone, grammatical patterns, and contextual anomalies to identify pure social engineering impersonation, providing a robust defense layer against advanced phishing and fraud.

Detecting Insider Threat Behaviors

detecting-insider-threat-behaviors

mukul975/Anthropic-Cybersecurity-Skills

This guide details methodologies for proactively hunting and detecting various insider threat indicators. It focuses on identifying unusual data access patterns, off-hours activity, mass file exfiltration, and unauthorized privilege abuse. By correlating data from EDR and SIEM platforms, security teams can scope compromises, simulate attack chains, and significantly enhance proactive threat detection capabilities.

Detecting Pass-The-Hash Attacks

detecting-pass-the-hash-attacks

mukul975/Anthropic-Cybersecurity-Skills

A comprehensive guide for proactive threat hunting and incident response, detailing how to detect Pass-the-Hash attacks. It involves analyzing NTLM authentication patterns, identifying suspicious Type 3 logons, and correlating these anomalies with credential dumping techniques using SIEM/EDR tools.

Language