Download

Skill UI

Browse and discover 5970+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Core , found 182 results

Default Newest Most Downloaded

Detect Insider Threats

detecting-insider-threat-with-ueba

mukul975/Anthropic-Cybersecurity-Skills

Implements UEBA using Elasticsearch/OpenSearch to normalize authentication, file, and network logs, establish behavioral baselines, calculate anomaly scores through deviation and peer-group analysis, and correlate indicators into SOC-ready alerts for insider threat detection.

LOLBA Detection Playbook

detecting-living-off-the-land-with-lolbas

mukul975/Anthropic-Cybersecurity-Skills

Detect abuse of Living Off the Land binaries such as certutil, regsvr32, mshta, and rundll32 by ingesting Sysmon and Windows event telemetry, generating Sigma rules, and analyzing parent-child process chains to score alerts and report MITRE ATT&CK mappings.

Cobalt Strike Beacon Detection

hunting-for-cobalt-strike-beacons

mukul975/Anthropic-Cybersecurity-Skills

Detect Cobalt Strike beacon callbacks by correlating Zeek JA3/JARM data, Suricata IDS alerts, TLS certificate signatures, HTTP malleable profiles, and Python PCAP analysis to score suspicious traffic.

Process Injection Hunting

hunting-for-process-injection-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detect process injection techniques via Sysmon Event IDs 8 and 10, analyze CreateRemoteThread and dangerous access masks, map source-target relationships, and score severity for structured hunt reports.

API Security Posture

implementing-api-security-posture-management

mukul975/Anthropic-Cybersecurity-Skills

Continuously discovers, classifies, and risk-scores every API by aggregating data from gateways, CI/CD pipelines, and monitoring so teams enforce policies, detect configuration drift, and keep the API risk posture current.

Continuous Security Validation

implementing-continuous-security-validation-with-bas

mukul975/Anthropic-Cybersecurity-Skills

Deploy BAS platforms to continuously emulate attacker techniques across MITRE ATT&CK, score prevention/detection, and validate controls from email gateways to cloud workloads in a safe automated loop.

EPSS Vulnerability Prioritization

implementing-epss-score-for-vulnerability-prioritization

mukul975/Anthropic-Cybersecurity-Skills

Integrates FIRST’s EPSS API with vulnerability scan outputs to score CVEs by exploitation likelihood, enriches CVSS data, and ranks remediation actions so teams tackle the riskiest threats first.

Guardicore Microsegmentation Workflow

implementing-microsegmentation-with-guardicore

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying Akamai Guardicore agents, mapping east-west application flows with Reveal, and authoring granular policies so distributed workloads maintain least-privilege communication across datacenters and cloud.

MITRE ATT&CK Coverage Mapping

implementing-mitre-attack-coverage-mapping

mukul975/Anthropic-Cybersecurity-Skills

Provides SOC teams with a structured process to map detection rules to MITRE ATT&CK techniques, highlight gaps, score maturity, and prioritize rule development for better SIEM coverage.

Network Traffic Baselining

implementing-network-traffic-baselining

mukul975/Anthropic-Cybersecurity-Skills

Build statistical network baselines from NetFlow/IPFIX data with Python pandas, generating hourly/daily profiles, per-host stats, protocol ratios, and anomaly flags so SOC analysts can spot exfiltration spikes or beaconing.

Shodan IP Reputation Analysis

performing-ip-reputation-analysis-with-shodan

mukul975/Anthropic-Cybersecurity-Skills

Use the Shodan API and InternetDB to enrich IP security alerts, inspect open ports/services, flag CVE-linked vulnerabilities, and score reputation for SOC triage and threat intelligence workflows.

Azure Defender Deployment

securing-azure-with-microsoft-defender

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through enabling Microsoft Defender for Cloud plans, configuring multi-cloud connectors, analyzing Secure Score recommendations, and automating security controls in Azure to protect workloads across servers, containers, storage, and databases.

Prev 1 2 3...12 13 141516 Next

Language