Download

Skill UI

Browse and discover 6006+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Evtx , found 6 results

Default Newest Most Downloaded

PowerShell Script Block Analysis

analyzing-powershell-script-block-logging

mukul975/Anthropic-Cybersecurity-Skills

Parses PowerShell Event ID 4104 logs from EVTX files to rebuild script blocks, run entropy and pattern checks, and flag obfuscated commands, encoded payloads, download cradles, and AMSI bypass attempts for security response workflows.

Detect Golden Ticket Attacks

detecting-golden-ticket-attacks

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows Security EVTX logs to detect Kerberos golden ticket assaults by correlating event IDs 4768, 4624, and 4672, flagging long-lived TGTs, privilege escalations without group changes, SID inconsistencies, and outputting a timeline-based report.

RDP Brute Force Detection

detecting-rdp-brute-force-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detect RDP brute-force attacks by parsing Windows Security EVTX logs, correlating Event ID 4625 failures with subsequent 4624 successes, spotting NLA bypass patterns, and summarizing source-IP trends for actionable alerts.

Windows Event Log Forensics

extracting-windows-event-logs-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract, parse, and analyze EVTX files with Chainsaw, Hayabusa, and EvtxECmd to uncover lateral movement, persistence, and privilege escalation during incident response and forensic investigations.

Anomalous PowerShell Hunting

hunting-for-anomalous-powershell-execution

mukul975/Anthropic-Cybersecurity-Skills

Hunts malicious PowerShell activity by parsing EVTX exports of Script Block Logging, Module Logging, and process events to surface encoded commands, obfuscation, AMSI bypass attempts, download cradles, and credential-stealing behaviors.

Windows Artifact Analysis Suite

performing-windows-artifact-analysis-with-eric-zimmerman-tools

mukul975/Anthropic-Cybersecurity-Skills

Automates parsing Windows artifacts with Eric Zimmerman’s EZ Tools suite, combining KAPE collection with MFTECmd, PECmd, RECmd, EvtxECmd, and Timeline Explorer output to give responders structured CSV data for registries, prefetch, event logs, and the MFT.

1

Language