Download

Skill UI

Browse and discover 6152+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search IOC , found 36 results

Default Newest Most Downloaded

Live Incident Response Dashboard

building-incident-response-dashboard

mukul975/Anthropic-Cybersecurity-Skills

Creates real-time incident response dashboards in Splunk, Elastic, or Grafana so SOC teams track impacted assets, containment progress, IOC spread, and response timelines during active incidents.

IOC Defanging Sharing Pipeline

building-ioc-defanging-and-sharing-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion of IOC sources, normalizes and deduplicates values, defangs risky URLs/IPs/domains/emails, builds STIX 2.1 indicators, and dispatches them to TAXII servers, MISP instances, or email so analysts can safely share threat intel.

OpenCTI IOC Enrichment

building-ioc-enrichment-pipeline-with-opencti

mukul975/Anthropic-Cybersecurity-Skills

Automates building an IOC enrichment pipeline on OpenCTI by deploying connectors such as VirusTotal, Shodan, AbuseIPDB, and GreyNoise to add context, confidence scoring, and threat actor/campaign correlation for analysts.

Phishing Reporting Workflow

building-phishing-reporting-button-workflow

mukul975/Anthropic-Cybersecurity-Skills

Implements the built-in phishing report button and SOAR-driven triage pipeline so suspicious emails are auto-classified, IOCs extracted, remediation actions taken, and reporters thanked.

MISP Threat Feed Aggregation

building-threat-feed-aggregation-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Deploy MISP via Docker to aggregate, correlate, and share threat intelligence feeds from OSINT, commercial, and community sources, enabling centralized IOC management and automated SIEM/SOAR integrations.

Threat Intelligence Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion, normalization, scoring, and distribution of STIX/TAXII and open-source threat feeds so SOCs can match IOCs in real time across SIEM and detection tools.

Compromise Indicator Collector

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Systematically collects and enriches IOCs from SIEM logs, memory analysis, and malware reports, then translates them into STIX/TAXII for defensive systems and trusted partners to detect, block, and share threat intelligence.

MISP Threat Intelligence Pipeline

collecting-threat-intelligence-with-misp

mukul975/Anthropic-Cybersecurity-Skills

Guide for deploying MISP, configuring community and custom feeds, using PyMISP for scripted searches, and exporting validated IOCs in STIX/TAXII, Suricata, or CSV formats to automate threat intelligence ingestion.

Malware Incident Response

conducting-malware-incident-response

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through detecting, analyzing, containing, and eradicating malware across enterprise endpoints while coordinating recovery, IOC sharing, and updated defenses.

Threat Campaign Correlation

correlating-threat-campaigns

mukul975/Anthropic-Cybersecurity-Skills

Correlates disparate incidents, IOCs, and adversary behaviors using infrastructure, capability, temporal, and victimology pivots to build campaign graphs and intelligence reports for detection tuning and attribution.

Pass The Hash Detection

detecting-pass-the-hash-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detecting Pass-the-Hash attacks by correlating NTLM Type 3 logons, telemetry from EDR/SIEM, and credential-dumping IOCs to proactively hunt and validate incidents across Windows estates.

IOC Extraction From Malware

extracting-iocs-from-malware-samples

mukul975/Anthropic-Cybersecurity-Skills

Processes malware samples to extract file, network, host, and behavioral indicators for sharing threat intelligence, building blocklists, and crafting detection signatures from validated analysis artifacts.

Language