Download

Skill UI

Browse and discover 6556+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search CI , found 1988 results

Default Newest Most Downloaded

TruffleHog AWS Credential Detection

detecting-aws-credential-exposure-with-trufflehog

mukul975/Anthropic-Cybersecurity-Skills

Detect exposed AWS credentials across git histories, CI/CD pipelines, and configs using TruffleHog, git-secrets, and AWS checks before deployments or audits.

GuardDuty Findings Automation

detecting-aws-guardduty-findings-automation

mukul975/Anthropic-Cybersecurity-Skills

Automates AWS GuardDuty findings by linking EventBridge rules to Lambda responders, quarantining EC2 instances, tagging resources, snapshotting volumes, and notifying teams for real-time incident handling.

Detect Azure Lateral Movement

detecting-azure-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detect Azure AD lateral movement by correlating Microsoft Graph audit logs, Sentinel KQL analytics, and sign-in anomalies to spot service principal abuse, stolen tokens, and cross-tenant pivots, then report indicators and containment steps.

Detect Azure Service Principal Abuse

detecting-azure-service-principal-abuse

mukul975/Anthropic-Cybersecurity-Skills

Provides detection workflows, queries, and investigation steps for spotting Azure service principal abuse in Microsoft Entra ID environments, covering credential updates, privileged role assignments, admin consent bypass, enumeration, and OAuth permission escalation via Sentinel or Splunk.

Business Email Compromise Detection

detecting-business-email-compromise

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC analysts through detecting business email compromise by tuning email gateway rules, applying behavioral analytics, and enforcing financial controls to spot fraudulent payment, social-engineering, or account takeover attempts.

DCSync Attack Detection

detecting-dcsync-attack-in-active-directory

mukul975/Anthropic-Cybersecurity-Skills

Detects DCSync attacks by alerting when non-domain-controller accounts request AD replication GUIDs, correlating DsGetNCChanges traffic, and guiding incident response on credential theft.

Detect Email Account Compromise

detecting-email-account-compromise

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Microsoft 365 audit, inbox rule, and sign-in data to spot compromised O365 or Google Workspace accounts, flagging forwarding rules, suspicious Microsoft Graph API usage, and impossible-travel signals for faster incident response.

Email Forwarding Detection

detecting-email-forwarding-rules-attack

mukul975/Anthropic-Cybersecurity-Skills

Detect suspicious email forwarding rules that attackers use to maintain persistence and steal intelligence; guides analysts through hypothesis, data sourcing, multi-tool querying, and validation to hunt BEC and related threats.

Endpoint Evasion Detection

detecting-evasion-techniques-in-endpoint-logs

mukul975/Anthropic-Cybersecurity-Skills

Detects adversary defense-evasion techniques in endpoint logs, covering log tampering, timestomping, process injection, and security tool disabling; useful for threat hunting, detection engineering, and incident response on Windows/EDR telemetry.

Detect DNS Data Exfiltration

detecting-exfiltration-over-dns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek dns.log to find high-entropy subdomains, long labels, and query volume anomalies, score suspicious domains, and report indicators so analysts can catch DNS-based exfiltration tools.

Detect Golden Ticket Attacks

detecting-golden-ticket-attacks

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows Security EVTX logs to detect Kerberos golden ticket assaults by correlating event IDs 4768, 4624, and 4672, flagging long-lived TGTs, privilege escalations without group changes, SID inconsistencies, and outputting a timeline-based report.

Lateral Movement Detection

detecting-lateral-movement-in-network

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement across enterprise networks by correlating Windows security logs, Zeek flow/SMB traces, and SIEM rules to flag Pass-the-Hash, PsExec, and RDP pivots during incident response and hunting.

Prev 1 2 3...123 124 125126127 128 129...164 165 166 Next

Language