Download

Skill UI

Browse and discover 7065+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search C2-Detection , found 14 results

Default Newest Most Downloaded

Cobalt Strike Profile Analysis

analyzing-cobalt-strike-malleable-profiles

mukul975/Anthropic-Cybersecurity-Skills

Parses Cobalt Strike malleable C2 profiles via pyMalleableC2 to pull beacon configs, HTTP communication patterns, sleep/jitter settings, and combines JARM scans for C2 detection when hunting suspected infrastructure or building IDS signatures.

Analyze Cobalt Strike Profiles

analyzing-cobaltstrike-malleable-c2-profiles

mukul975/Anthropic-Cybersecurity-Skills

Parse and examine Cobalt Strike Malleable C2 profiles with dissect.cobaltstrike and pyMalleableC2, extracting URI/HTTP patterns, sleep/jitter settings, and injection tactics to detect evasion and generate network detection rules for SOC teams.

C2 Communication Analysis

analyzing-command-and-control-communication

mukul975/Anthropic-Cybersecurity-Skills

Dissects malware command-and-control channels to understand beacon rhythms, command structures, data encoding, and infrastructure for detection development and threat intelligence workflows.

DNS Exfiltration Detection

analyzing-dns-logs-for-exfiltration

mukul975/Anthropic-Cybersecurity-Skills

Analyzes DNS query logs in SIEM tools to surface tunneling, DGA domains, and covert C2 traffic through entropy, query-volume, and subdomain-length heuristics for SOC investigations.

PowerShell Empire Artifact Detection

analyzing-powershell-empire-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows event logs for PowerShell Empire artifacts such as default launcher strings, Base64 stagers, known module invocations, and staging URLs to support threat hunting and detection tuning.

Ransomware Network Indicators

analyzing-ransomware-network-indicators

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek conn.log and NetFlow data to surface ransomware network indicators such as C2 beaconing, TOR exit node connections, high-volume exfiltration flows, and risky DNS patterns, then score risks for incident response and detection tuning.

Zeek Beaconing Detection

detecting-beaconing-patterns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Zeek conn.log intervals with ZAT to compute jitter metrics and flag low-variance periodic connections, helping SOC analysts hunt for command-and-control callbacks and validate monitoring coverage.

Mobile Malware Behavior Detection

detecting-mobile-malware-behavior

mukul975/Anthropic-Cybersecurity-Skills

Detects and analyzes malicious behavior in Android and iOS apps through static, MobSF, Frida, and network monitoring workflows, helping analysts triage suspicious builds, hunt indicators, and validate exfiltration or C2 signals during incident response.

Command and Control Beaconing Detection

hunting-for-command-and-control-beaconing

mukul975/Anthropic-Cybersecurity-Skills

Detects command-and-control beaconing in network telemetry via frequency/jitter analysis, reputation checks, and endpoint context so hunters can spotlight compromised hosts and guide response workflows.

Zeek DNS Tunnel Detection

hunting-for-dns-tunneling-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek dns.log for long queries, high-entropy subdomains, unusual record types, and query volumes to detect DNS tunneling and covert data exfiltration before it reaches other channels.

Domain Fronting Detection

hunting-for-domain-fronting-c2-traffic

mukul975/Anthropic-Cybersecurity-Skills

Detects domain fronting C2 traffic by comparing TLS SNI and HTTP Host headers from proxy logs, leveraging pyOpenSSL to inspect certificate issuers and SANs, correlating CDN providers and IP ranges, and scoring alerts for high-confidence threat hunting.

Ghidra Malware Reverse Engineering

reverse-engineering-malware-with-ghidra

mukul975/Anthropic-Cybersecurity-Skills

Reverse engineer malware binaries with Ghidra to decipher C2 protocols, cryptographic routines, and obfuscation, enabling analysts to extract embedded configs, map command dispatchers, and craft detection rules.

Language