Download

Skill UI

Browse and discover 6044+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search C2 Detection , found 11 results

Default Newest Most Downloaded

Cobalt Strike Profile Analysis

analyzing-cobalt-strike-malleable-profiles

mukul975/Anthropic-Cybersecurity-Skills

Parses Cobalt Strike malleable C2 profiles via pyMalleableC2 to pull beacon configs, HTTP communication patterns, sleep/jitter settings, and combines JARM scans for C2 detection when hunting suspected infrastructure or building IDS signatures.

Cobalt Strike Profile Analysis

analyzing-cobaltstrike-malleable-c2-profiles

mukul975/Anthropic-Cybersecurity-Skills

Parse Cobalt Strike Malleable C2 profiles with dissect.cobaltstrike and pyMalleableC2 to extract HTTP indicators, jitter/sleep settings, DNS and injection configs, then craft Suricata/Snort signatures for detection.

Command-and-Control Analysis

analyzing-command-and-control-communication

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware command-and-control (C2) communication by profiling protocols, beaconing behavior, and payload structure to inform detection, reverse engineering, and threat intelligence workflows.

DNS Exfiltration Detection

analyzing-dns-logs-for-exfiltration

mukul975/Anthropic-Cybersecurity-Skills

Scans DNS query logs within SIEM platforms to flag data exfiltration by spotting suspicious tunneling subdomains, high-entropy DGA-style domains, and abnormal query volumes, helping SOC teams uncover DNS-based threats evading standard controls.

NetFlow Anomaly Detection

analyzing-network-flow-data-with-netflow

mukul975/Anthropic-Cybersecurity-Skills

Parses NetFlow v9/IPFIX data with Python's netflow library, builds traffic baselines, and applies statistical checks to flag volumetric spikes, port scans, data exfiltration, or C2 beaconing before producing a prioritized findings report.

Malware Network Traffic Analysis

analyzing-network-traffic-of-malware

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware-generated network traffic from sandbox or incident captures using Wireshark, Zeek, and Suricata to highlight C2 protocols, data exfiltration paths, lateral movement hints, and detection signature opportunities.

PowerShell Empire Detection

analyzing-powershell-empire-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Scans Windows Script Block and Module Logging events to spot PowerShell Empire launchers, Base64 loaders, staging URLs, user agents, and module invocations so threat hunters can flag persistence or C2 activity quickly.

Beaconing Detection with Zeek

detecting-beaconing-patterns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Loads Zeek conn.log via ZAT into Pandas to analyze connection intervals, computing jitter and flagging low-std periodic flows to catch C2 beaconing during network threat hunting.

GuardDuty Cloud Threat Detection

detecting-cloud-threats-with-guardduty

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through deploying Amazon GuardDuty with protection plans for S3, EKS, EC2 runtime monitoring, and Lambda, interpreting findings, and wiring EventBridge plus Lambda for automated responses across AWS accounts.

Cloud Cryptomining Detection

detecting-cryptomining-in-cloud

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through identifying unauthorized cloud cryptomining by correlating cost anomalies, GuardDuty crypto findings, network traffic to mining pools, and runtime process hooks across EC2, ECS, EKS, and Azure workloads.

Domain Fronting Detection

hunting-for-domain-fronting-c2-traffic

mukul975/Anthropic-Cybersecurity-Skills

Analyze proxy logs and TLS certificates to detect domain fronting C2 traffic by flagging SNI and HTTP Host mismatches, correlating CDN issuers and IP ranges, and scoring alerts with MITRE ATT&CK context.

1

Language