Download

Skill UI

Browse and discover 6051+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Containment , found 20 results

Default Newest Most Downloaded

Security Incident Response Guide

responding-to-security-incidents

jeremylongshore/claude-code-plugins-plus-skills

Guides teams through the security incident response lifecycle by classifying attacks, generating containment/remediation playbooks, directing evidence collection, and coordinating post-incident follow-up to minimize damage.

Live Incident Response Dashboard

building-incident-response-dashboard

mukul975/Anthropic-Cybersecurity-Skills

Creates real-time incident response dashboards in Splunk, Elastic, or Grafana so SOC teams track impacted assets, containment progress, IOC spread, and response timelines during active incidents.

Structured Incident Response Playbooks

building-incident-response-playbook

mukul975/Anthropic-Cybersecurity-Skills

Designs NIST SP 800-61r3/SANS PICERL-aligned incident response playbooks covering metadata, decision trees, escalation criteria, RACI roles, SOAR integrations, and technical containment procedures for repeatable response operations.

Ransomware SOC Playbook

building-soc-playbook-for-ransomware

mukul975/Anthropic-Cybersecurity-Skills

Creates a structured SOC ransomware response playbook with detection queries, triage decision trees, containment APIs, and evidence collection tied to NIST SP 800-61 and MITRE ATT&CK so teams can rehearse consistent procedures.

Phishing Incident Response

conducting-phishing-incident-response

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through phishing incident response, covering report triage, header and sandbox analysis, impact assessment, containment, and account recovery for compromised credentials.

Active Breach Containment

containing-active-breach

mukul975/Anthropic-Cybersecurity-Skills

Executes containment strategies to halt active adversary behavior during confirmed breaches by segmenting the network, isolating endpoints, revoking credentials, and tightening access controls to prevent lateral movement and ongoing damage.

Detect Email Compromise

detecting-email-account-compromise

mukul975/Anthropic-Cybersecurity-Skills

Analyze Microsoft 365 audit logs, inbox rules, sign-in data, and Graph API activity to spot compromised O365 and Google Workspace mailboxes, then report malicious forwarding, impossible travel, suspicious OAuth access, and containment steps.

Email Forwarding Rules Detection

detecting-email-forwarding-rules-attack

mukul975/Anthropic-Cybersecurity-Skills

Hunt for malicious email forwarding rules that adversaries use to maintain persistence, using EDR, SIEM, and telemetry data to validate findings, correlate ATT&CK T1114 indicators, and recommend containment actions.

EDR Credential Dumping Detection

detecting-t1003-credential-dumping-with-edr

mukul975/Anthropic-Cybersecurity-Skills

Detects credential dumping T1003 activity by correlating EDR telemetry, Sysmon process access, and Windows security events to flag suspicious LSASS, SAM, NTDS, and cached credential access, guiding SOCs through containment and lateral movement analysis.

Malware Eradication Workflow

eradicating-malware-from-infected-systems

mukul975/Anthropic-Cybersecurity-Skills

Guides responders through systematic removal of malware from compromised hosts, covering persistence mapping, artifact deletion, credential resets, patching, and validation to ensure attackers cannot reestablish footholds during post-containment cleanup.

Shadow Copy Deletion Hunt

hunting-for-shadow-copy-deletion

mukul975/Anthropic-Cybersecurity-Skills

Workflow for detecting ransomware preparation and anti-forensics by hunting shadow copy deletion commands (vssadmin, WMIC, PowerShell) across EDR, SIEM, Sysmon, and threat intel to validate hypotheses and recommend containment.

Supply Chain Compromise Hunt

hunting-for-supply-chain-compromise

mukul975/Anthropic-Cybersecurity-Skills

Guides proactive hunting for supply chain compromise indicators across EDR and SIEM telemetry, validating results, correlating ATT&CK TTPs, and documenting findings to inform containment and detection tuning.

Language