Download

Skill UI

Browse and discover 6006+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Baseline , found 36 results

Default Newest Most Downloaded

Analyzing Persistence with Autoruns

analyzing-malware-persistence-with-autoruns

mukul975/Anthropic-Cybersecurity-Skills

Systematically use Sysinternals Autoruns and Autorunsc to scan Windows auto-start points, flag unsigned binaries, suspicious paths, LOLBins, and compare baselines for new persistence layers, with optional VirusTotal validation for triage.

NetFlow Anomaly Detection

analyzing-network-flow-data-with-netflow

mukul975/Anthropic-Cybersecurity-Skills

Parses NetFlow v9/IPFIX data with Python's netflow library, builds traffic baselines, and applies statistical checks to flag volumetric spikes, port scans, data exfiltration, or C2 beaconing before producing a prioritized findings report.

Cloud Security Posture Management

building-cloud-security-posture-management

mukul975/Anthropic-Cybersecurity-Skills

Guides security architects through designing and deploying a continuous CSPM program across AWS, Azure, and GCP, covering tool selection, policy baselines, automation, and SOC integration to monitor misconfigurations and prioritize remediation.

Industrial Control Anomaly Detection

detecting-anomalies-in-industrial-control-systems

mukul975/Anthropic-Cybersecurity-Skills

Deploys ML-trained baselines across SCADA, Modbus, DNP3, and OPC UA communications in OT networks, correlating historian data to flag rogue devices and anomalous behavior.

Anomalous Authentication Detection

detecting-anomalous-authentication-patterns

mukul975/Anthropic-Cybersecurity-Skills

Detects anomalous authentication patterns via UEBA, statistical baselines, and machine learning to flag impossible travel, credential stuffing, brute force, and compromised account behavior across authentication logs for SOC investigations.

Detecting SCADA Attacks

detecting-attacks-on-scada-systems

mukul975/Anthropic-Cybersecurity-Skills

Identifies cyber attacks that target SCADA/ICS environments by leveraging OT-aware intrusion detection, industrial protocol anomaly analysis, and process data baselines to spot MITM, PLC injection, historian tampering, and DoS cases that IT-focused tools miss.

CloudTrail Anomaly Detection

detecting-aws-cloudtrail-anomalies

mukul975/Anthropic-Cybersecurity-Skills

Detect suspicious API usage in AWS CloudTrail by querying events with boto3, building statistical baselines, and flagging anomalies such as new event sources, geographic shifts, frequent failures, and sensitive IAM/KMS/S3 calls to surface potential credential compromise or insider threat activity.

Detect DNP3 Anomalies

detecting-dnp3-protocol-anomalies

mukul975/Anthropic-Cybersecurity-Skills

Detect anomalies in SCADA DNP3 traffic by monitoring for unauthorized control commands, protocol violations, firmware update attempts, and unusual baselines through deep packet inspection and ML-enabled heuristics.

Detect Insider Threats

detecting-insider-threat-with-ueba

mukul975/Anthropic-Cybersecurity-Skills

Implements UEBA using Elasticsearch/OpenSearch to normalize authentication, file, and network logs, establish behavioral baselines, calculate anomaly scores through deviation and peer-group analysis, and correlate indicators into SOC-ready alerts for insider threat detection.

Modbus Injection Detection

detecting-modbus-command-injection-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detects Modbus command injection attacks in ICS by monitoring Modbus TCP/RTU traffic for unauthorized writes, anomalous function codes, and baseline deviations using IDS/protocol inspection so SOC analysts can flag FrostyGoop-style manipulations before they impact PLC operations.

Hardening Windows Endpoints

hardening-windows-endpoint-with-cis-benchmark

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying CIS Benchmark hardening for Windows workstations and servers, covering profile selection, GPO imports, key security controls, CIS-CAT validation, and exception documentation to enforce consistent baselines and compliance.

DNS Persistence Hunting

hunting-for-dns-based-persistence

mukul975/Anthropic-Cybersecurity-Skills

Hunt DNS persistence by exporting zone baselines, querying SecurityTrails passive history, and auditing provider logs to spot hijacks, dangling records, and unauthorized delegations.

Language