Download

Skill UI

Browse and discover 7065+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Endpoint Detection , found 13 results

Default Newest Most Downloaded

Azure AI Text Translation

azure-ai-translation-text-py

sickn33/antigravity-awesome-skills

Azure AI Text Translation SDK for Python offers real-time translation, transliteration, detection, and dictionary lookup APIs so applications can support multilingual content, custom endpoints, and rich translation options.

Azure AI Text Translation

azure-ai-translation-text-py

sickn33/antigravity-awesome-skills

Azure AI Text Translation SDK for Python offers real-time translation, transliteration, detection, and dictionary lookup APIs so applications can support multilingual content, custom endpoints, and rich translation options.

Host-Based Intrusion Configuration

configuring-host-based-intrusion-detection

mukul975/Anthropic-Cybersecurity-Skills

Guides configuring host-based intrusion detection (HIDS) with Wazuh/OSSEC/AIDE, covering agent installs, file integrity monitoring, rootkit checks, log rules, and active responses so endpoints stay compliant and feed SIEMs.

CrowdStrike Falcon Deployment

deploying-edr-agent-with-crowdstrike

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying and configuring CrowdStrike Falcon EDR sensors across Windows, macOS, and Linux endpoints, covering policy tuning, response workflows, and SIEM integrations for onboarding, automated detection, and troubleshooting.

Endpoint Evasion Detection

detecting-evasion-techniques-in-endpoint-logs

mukul975/Anthropic-Cybersecurity-Skills

Detect defense-evasion techniques in endpoint logs by identifying log tampering, timestomping, process injection, security-tool disabling, and masquerading; use in threat hunting, detection engineering, or investigations that query telemetry from Sysmon, SIEM, or EDR.

Detecting Fileless Endpoint Attacks

detecting-fileless-attacks-on-endpoints

mukul975/Anthropic-Cybersecurity-Skills

Guides enabling PowerShell, Sysmon, and AMSI telemetry plus crafting detection hunts that catch fileless malware, reflective DLL injections, WMI persistence, and registry-based execution techniques operating entirely in memory.

Insider DLP Exfiltration Detection

detecting-insider-data-exfiltration-via-dlp

mukul975/Anthropic-Cybersecurity-Skills

Analyzes endpoint and cloud logs with pandas baselines and DLP policy violation context to expose insider exfiltration signs such as anomalous uploads, off-hours access, and device spikes during threat investigations.

Shadow API Endpoint Detection

detecting-shadow-api-endpoints

mukul975/Anthropic-Cybersecurity-Skills

Detects undocumented API endpoints by comparing traffic logs with OpenAPI specs, sweeping codebases, and using discovery tools so teams can inventory shadow APIs, validate monitoring rules, and shore up attack surface controls.

Command and Control Beaconing Detection

hunting-for-command-and-control-beaconing

mukul975/Anthropic-Cybersecurity-Skills

Detects command-and-control beaconing in network telemetry via frequency/jitter analysis, reputation checks, and endpoint context so hunters can spotlight compromised hosts and guide response workflows.

Spearphishing Indicator Hunt

hunting-for-spearphishing-indicators

mukul975/Anthropic-Cybersecurity-Skills

Hunt for spearphishing indicators across email logs, endpoint telemetry, and network data to detect targeted campaigns, validate intelligence, and update detections with actionable findings for containment.

Wazuh Endpoint Detection Workflow

implementing-endpoint-detection-with-wazuh

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure Wazuh SIEM/XDR to detect endpoints, manage agents, author custom decoders/rules, query alerts via REST, and validate automated responses with logtest for security posture checks.

Detect Lateral Movement

performing-lateral-movement-detection

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement such as Pass-the-Hash, PsExec, WMI, RDP, and SMB spreading by correlating Windows logs, NetFlow/Zeek data, and endpoint telemetry mapped to ATT&CK TA0008, supporting SOC investigations and detection engineering.

Language