Download

Skill UI

Browse and discover 6610+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search CI , found 2010 results

Default Newest Most Downloaded

Detecting Email Account Compromise

detecting-email-account-compromise

mukul975/Anthropic-Cybersecurity-Skills

Detect compromised Office 365 and Google Workspace inboxes by analyzing rule creation, sign-in anomalies, forwarding actions, suspicious OAuth access, and correlated indicators to surface takeover incidents before data exfiltration.

Detecting Email Forwarding Rules

detecting-email-forwarding-rules-attack

mukul975/Anthropic-Cybersecurity-Skills

Hunt for adversaries creating malicious email forwarding rules to persist in environments, using SIEM/EDR telemetry to validate hypotheses, analyze anomalies, and document response guidance.

Detect Golden Ticket Attacks

detecting-golden-ticket-attacks

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows Security EVTX logs to detect Kerberos golden ticket assaults by correlating event IDs 4768, 4624, and 4672, flagging long-lived TGTs, privilege escalations without group changes, SID inconsistencies, and outputting a timeline-based report.

Detecting Insider Threats

detecting-insider-threat-behaviors

mukul975/Anthropic-Cybersecurity-Skills

Detects insider threat behaviors such as unusual data access, off-hour activity, mass downloads, privilege abuse, and resignation-linked data theft by hunting through SIEM/EDR telemetry and threat intel to support proactive detection and incident response.

Kerberoasting Detection Playbook

detecting-kerberoasting-attacks

mukul975/Anthropic-Cybersecurity-Skills

Structured playbook for hunting Kerberoasting attacks by correlating SIEM/EDR telemetry, validating anomalous TGS requests, and iterating on proactive detection rules during assessments, intelligence-driven hunts, or incidents.

Network Lateral Movement Detection

detecting-lateral-movement-in-network

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement techniques in enterprise networks by correlating authentication logs, SMB/RDP flows, and Zeek/Velociraptor telemetry, enabling SIEM alerts and hunting for pass-the-hash or RDP pivot activity.

Splunk Lateral Movement Detection

detecting-lateral-movement-with-splunk

mukul975/Anthropic-Cybersecurity-Skills

Guide to hunting lateral movement using Splunk SPL against Windows auth, SMB, and remote service abuse logs to trace credential theft, anomalous access, and threat paths for incident response.

Detect Living Off Land Attacks

detecting-living-off-the-land-attacks

mukul975/Anthropic-Cybersecurity-Skills

Monitors Windows process creation, parent-child relationships, command lines, and network activity to flag suspicious LOLBin use for SIEM/EDR detection, Sigma rule tuning, and incident response workflows.

Sysmon Scheduled Task Detection

detecting-malicious-scheduled-tasks-with-sysmon

mukul975/Anthropic-Cybersecurity-Skills

Detect malicious scheduled task creation and modification using Sysmon (Event IDs 1/11), Windows Security events (4698/4702), and correlation of suspicious parents, public paths, and encoded arguments for persistence and lateral movement analysis.

Mobile Malware Behavior Detection

detecting-mobile-malware-behavior

mukul975/Anthropic-Cybersecurity-Skills

Detects and analyzes malicious behavior in Android and iOS apps through static, MobSF, Frida, and network monitoring workflows, helping analysts triage suspicious builds, hunt indicators, and validate exfiltration or C2 signals during incident response.

Zeek Network Anomaly Detection

detecting-network-anomalies-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Deploy Zeek to passively observe traffic, emit structured logs, and apply bespoke detection scripts for threat hunting, incident response, and monitoring anomalous network behavior.

Detect OAuth Token Theft

detecting-oauth-token-theft

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through detecting and responding to OAuth token theft, covering Microsoft Entra ID/Azure AD protections, conditional access policies, and sign-in log investigations to block token replay, PRT abuse, and session hijacking in cloud deployments.

Prev 1 2 3...124 125 126127128 129 130...166 167 168 Next

Language