Download

Skill UI

Browse and discover 5987+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Cal , found 1118 results

Default Newest Most Downloaded

Ransomware Canary Deployment

deploying-ransomware-canary-files

mukul975/Anthropic-Cybersecurity-Skills

Deploys Python watchdog monitors for deceptive canary files placed in critical directories, alerting via email/Slack/syslog whenever ransomware touches them so teams can respond before encryption.

Tailscale Zero Trust VPN

deploying-tailscale-for-zero-trust-vpn

mukul975/Anthropic-Cybersecurity-Skills

Guide to deploying Tailscale as a WireGuard-powered zero trust mesh VPN, covering installation on Linux, Windows/macOS, Docker, and Kubernetes plus ACL configuration, identity-aware controls, and exit nodes for secure peer-to-peer connectivity.

Anomalous Authentication Detection

detecting-anomalous-authentication-patterns

mukul975/Anthropic-Cybersecurity-Skills

Detects anomalous authentication patterns via UEBA, statistical baselines, and machine learning to flag impossible travel, credential stuffing, brute force, and compromised account behavior across authentication logs for SOC investigations.

CloudTrail Anomaly Detection

detecting-aws-cloudtrail-anomalies

mukul975/Anthropic-Cybersecurity-Skills

Detect suspicious API usage in AWS CloudTrail by querying events with boto3, building statistical baselines, and flagging anomalies such as new event sources, geographic shifts, frequent failures, and sensitive IAM/KMS/S3 calls to surface potential credential compromise or insider threat activity.

Detect AWS IAM Escalation

detecting-aws-iam-privilege-escalation

mukul975/Anthropic-Cybersecurity-Skills

Analyzes AWS IAM policies via boto3 and Cloudsplaining-style logic to find privilege escalation paths, wildcard resources, and least-privilege violations, scoring risks and outputting JSON reports with remediation advice.

Detect Azure SP Abuse

detecting-azure-service-principal-abuse

mukul975/Anthropic-Cybersecurity-Skills

Guides defenders through detecting and investigating Azure service principal abuse—ranging from unauthorized credential additions and privileged role grants to admin consent bypass and OAuth escalation—using Sentinel/Splunk queries and Graph-powered investigation steps.

Container Escape Detection

detecting-container-escape-attempts

mukul975/Anthropic-Cybersecurity-Skills

Provides a Falco-based runtime detection workflow that monitors syscalls, proc paths, cgroups, kernel modules, and namespace actions to catch container escape attempts in Kubernetes and Docker environments before they reach the host.

Falco Container Escape Detection

detecting-container-escape-with-falco-rules

mukul975/Anthropic-Cybersecurity-Skills

Detect container escape attempts in real time with Falco runtime rules that watch syscalls, host mounts, privileged launches, kernel modules, cgroups, and sensitive files on Kubernetes or standalone Linux hosts.

DNS Exfiltration Detection

detecting-dns-exfiltration-with-dns-query-analysis

mukul975/Anthropic-Cybersecurity-Skills

Detects DNS tunneling exfiltration by analyzing passive DNS logs for anomalous query entropy, volumes, subdomain length, TXT abuse, and response payloads with statistical and ML techniques to alert on covert data leakage.

Detect Golden Ticket Attacks

detecting-golden-ticket-attacks

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows Security EVTX logs to detect Kerberos golden ticket assaults by correlating event IDs 4768, 4624, and 4672, flagging long-lived TGTs, privilege escalations without group changes, SID inconsistencies, and outputting a timeline-based report.

Detect Insider Threats

detecting-insider-threat-with-ueba

mukul975/Anthropic-Cybersecurity-Skills

Implements UEBA using Elasticsearch/OpenSearch to normalize authentication, file, and network logs, establish behavioral baselines, calculate anomaly scores through deviation and peer-group analysis, and correlate indicators into SOC-ready alerts for insider threat detection.

IDS Network Scan Detection

detecting-network-scanning-with-ids-signatures

mukul975/Anthropic-Cybersecurity-Skills

Detect reconnaissance tools such as Nmap and Masscan using Suricata/Snort IDS signatures, thresholds, and anomaly cues to alert on TCP/UDP scans, SYN/ACK probes, and other scan fingerprints before threat actors escalate.

Prev 1 2 3...83 84 858687 88 89...92 93 94 Next

Language