Download

Skill UI

Browse and discover 6582+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search CTI , found 3557 results

Default Newest Most Downloaded

Cloud Cryptomining Detection

detecting-cloud-cryptomining-activity

mukul975/Anthropic-Cybersecurity-Skills

Detect unauthorized crypto-mining in AWS, Azure, and GCP by correlating GuardDuty/Defender/SCC findings, compute anomalies, network flows, and container/serverless behaviors to validate threats and guide response.

GuardDuty Cloud Threats

detecting-cloud-threats-with-guardduty

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through deploying and automating Amazon GuardDuty across AWS accounts, enabling advanced protection plans, interpreting severity levels, and triggering EventBridge/Lambda incident response playbooks for EC2, EKS, Lambda, and S3 workloads.

Detect Compromised Cloud Credentials

detecting-compromised-cloud-credentials

mukul975/Anthropic-Cybersecurity-Skills

Detect compromised AWS, Azure, and GCP credentials by correlating GuardDuty, Defender for Identity, and SCC Event Threat Detection findings with abnormal API activity, impossible travel, and credential abuse indicators for triage and incident response.

Container Drift Runtime Detection

detecting-container-drift-at-runtime

mukul975/Anthropic-Cybersecurity-Skills

Detecting runtime container drift by tracking unauthorized binaries, filesystem writes, package installs, and configuration deviations from original images, enabling SOC analysts to hunt threats and validate Kubernetes workload integrity with tools like Falco.

Container Escape Detection

detecting-container-escape-attempts

mukul975/Anthropic-Cybersecurity-Skills

Blueprint for using runtime monitoring (Falco, auditd, custom rules) to spot namespace/capability abuse, sensitive mounts, and syscalls that signal container escape attempts.

Falco Container Escape Detection

detecting-container-escape-with-falco-rules

mukul975/Anthropic-Cybersecurity-Skills

Uses Falco runtime security rules to monitor syscalls, file access, and privilege escalations for detecting container escape attempts across Kubernetes and standalone Linux deployments.

Credential Dumping Detection

detecting-credential-dumping-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detect LSASS credential dumping, SAM exports, NTDS.dit theft, and comsvcs MiniDump abuse by correlating Sysmon Event ID 10, Windows Security logs, and SIEM rules, enabling SOC analysts to alert on suspicious access masks, tools, and shadow-copy creation patterns.

EDR Credential Dumping Detection

detecting-credential-dumping-with-edr

mukul975/Anthropic-Cybersecurity-Skills

Provides analysts with a workflow to hunt and investigate credential dumping (LSASS, SAM, NTDS, DCSync) using EDR telemetry, Sysmon access events, and AD replication monitoring.

Cloud Cryptomining Detection

detecting-cryptomining-in-cloud

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through multi-signal detection of unauthorized cryptocurrency mining in cloud workloads, combining cost, compute, network, GuardDuty, and runtime monitoring with alerting and remediation.

Active Directory DCSync Detection

detecting-dcsync-attack-in-active-directory

mukul975/Anthropic-Cybersecurity-Skills

Hunts for DCSync attacks by monitoring Active Directory replication requests, auditing Event ID 4662, correlating non-domain-controller RPC traffic, and alerting when unauthorized accounts request replication rights to detect credential theft.

DLL Sideloading Detection Guide

detecting-dll-sideloading-attacks

mukul975/Anthropic-Cybersecurity-Skills

Guidance for detecting DLL side-loading attacks by monitoring DLL loads, validating signatures/hashes, and correlating host behavior to flag hijacked execution flows in enterprise environments.

DNP3 Anomaly Detection

detecting-dnp3-protocol-anomalies

mukul975/Anthropic-Cybersecurity-Skills

Detects unauthorized DNP3 control commands, protocol violations, and baseline deviations via deep packet inspection and machine learning, fitting SCADA/energy IDS deployments monitoring RTUs and substations.

Prev 1 2 3...248 249 250251252 253 254...295 296 297 Next

Language