Download

Skill UI

Browse and discover 9688+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Data Exfiltration , found 24 results

Default Newest Most Downloaded

Netflow Traffic Anomaly Analysis

analyzing-network-flow-data-with-netflow

mukul975/Anthropic-Cybersecurity-Skills

Parses NetFlow v9/IPFIX via the Python netflow library to build traffic baselines and flag volumetric anomalies, port scans, exfiltration, and C2 beacons during SOC hunts.

Incident Network Traffic Analysis

analyzing-network-traffic-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Examines packet captures, Zeek logs, and NetFlow data to uncover C2 channels, lateral movement, and exfiltration during security incidents, guiding analysts through capture, filtering, and IOC extraction workflows.

Malware Network Traffic Analysis

analyzing-network-traffic-of-malware

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware-generated network traffic using Wireshark, Zeek, Suricata, and Python scripts to uncover C2 protocols, data exfiltration, DNS tunneling, HTTP/HTTPS payloads, and beaconing patterns during sandbox or live incident-response investigations.

Ransomware Network Indicators

analyzing-ransomware-network-indicators

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek conn.log and NetFlow data to surface ransomware network indicators such as C2 beaconing, TOR exit node connections, high-volume exfiltration flows, and risky DNS patterns, then score risks for incident response and detection tuning.

Full-Scope Red Teaming

conducting-full-scope-red-team-engagement

mukul975/Anthropic-Cybersecurity-Skills

Guides planning and executing MITRE ATT&CK-aligned red team engagements from reconnaissance through reporting, emphasizing stealthy payloads, lateral movement, defined objectives like domain dominance and data exfiltration, and the legal/prerequisite controls needed to validate detection and response readiness.

DNS Query Exfiltration Detection

detecting-dns-exfiltration-with-dns-query-analysis

mukul975/Anthropic-Cybersecurity-Skills

Builds a passive DNS analysis pipeline that flags DNS tunneling attempts by inspecting query entropy, subdomain length, volume spikes, TXT abuses, and response payload sizes so SOCs can detect exfiltrating data hidden in DNS traffic.

Detecting Email Account Compromise

detecting-email-account-compromise

mukul975/Anthropic-Cybersecurity-Skills

Detect compromised Office 365 and Google Workspace inboxes by analyzing rule creation, sign-in anomalies, forwarding actions, suspicious OAuth access, and correlated indicators to surface takeover incidents before data exfiltration.

Insider DLP Exfiltration Detection

detecting-insider-data-exfiltration-via-dlp

mukul975/Anthropic-Cybersecurity-Skills

Analyzes endpoint and cloud logs with pandas baselines and DLP policy violation context to expose insider exfiltration signs such as anomalous uploads, off-hours access, and device spikes during threat investigations.

Detecting S3 Exfiltration

detecting-s3-data-exfiltration-attempts

mukul975/Anthropic-Cybersecurity-Skills

Detects unauthorized S3 mass downloads by correlating CloudTrail S3 events, GuardDuty findings, Macie alerts, and VPC logs, enabling security teams to spot cross-account transfers and respond swiftly.

AgentTesla Config Extractor

extracting-config-from-agent-tesla-rat

mukul975/Anthropic-Cybersecurity-Skills

Extract embedded Agent Tesla RAT configuration such as SMTP/FTP/Telegram exfiltration credentials, keylogger settings, and C2 data from .NET assemblies via dnSpy/ILSpy decompilation and memory analysis for malware research or red-team validation.

Hunting Data Exfiltration Indicators

hunting-for-data-exfiltration-indicators

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through identifying and validating data exfiltration indicators via traffic baselines, anomaly detection, and protocol abuse analysis during incident response.

Detect Data Staging Activity

hunting-for-data-staging-before-exfiltration

mukul975/Anthropic-Cybersecurity-Skills

Detect data staging activity before exfiltration by monitoring archive tool execution, staging directories, large file consolidation, sensitive path access, and producing structured hunt reports that map events to MITRE ATT&CK techniques.

Language