Download

Skill UI

Browse and discover 6051+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Incident Investigation , found 22 results

Default Newest Most Downloaded

Incident Response Specialist

incident-responder

sickn33/antigravity-awesome-skills

Provides SRE-based incident response guidance, observability-driven investigation protocols, and structured communication/playbooks to stabilize outages, coordinate teams, and improve postincident reviews.

Obsidian Observability Toolkit

obsidian-observability

jeremylongshore/claude-code-plugins-plus-skills

Provides structured logging, performance metrics, error tracking, and a live debug panel for Obsidian plugins, complete with history buffers, timers, counters, and downloadable debug bundles to simplify monitoring and incident investigations.

Azure Activity Threat Hunting

analyzing-azure-activity-logs-for-threats

mukul975/Anthropic-Cybersecurity-Skills

Executes Azure Monitor activity and sign-in log queries using azure-monitor-query to spot suspicious admin operations, impossible travel, privilege escalation, and resource changes, supporting incident investigations and cloud SIEM detections.

Browser Artifact Analysis Tool

analyzing-browser-forensics-with-hindsight

mukul975/Anthropic-Cybersecurity-Skills

Hindsight parses Chromium browser artifacts to recover history, downloads, cookies, autofill entries, saved passwords, cache, extensions, and other web data, producing timelines or XLSX/JSON/SQLite reports for incident response, insider threat, and criminal investigations.

Phishing Email Header Forensics

analyzing-email-headers-for-phishing-investigation

mukul975/Anthropic-Cybersecurity-Skills

Parse and analyze email headers to trace phishing origins, validate SPF/DKIM/DMARC, inspect relay hops, and support incident response when suspicious messages evade detection.

Outlook PST Forensic Analysis

analyzing-outlook-pst-for-email-forensics

mukul975/Anthropic-Cybersecurity-Skills

Extract forensic evidence from Outlook PST/OST archives using libpff-based tooling and Python scripts to recover deleted items, headers, attachments, and metadata for incident response and legal investigations.

Windows Prefetch Execution Analysis

analyzing-prefetch-files-for-execution-history

mukul975/Anthropic-Cybersecurity-Skills

Provides a forensic workflow to parse Windows Prefetch files via PECmd or python parsers, capture run counts, timestamps, referenced files, and integrity hashes for incident timelines and malware investigations.

Splunk Security Log Analysis

analyzing-security-logs-with-splunk

mukul975/Anthropic-Cybersecurity-Skills

Leverages Splunk Enterprise Security with SPL to correlate Windows, firewall, proxy, DNS, and authentication logs for incident reconstruction, anomaly detection, and timeline building during investigations.

Windows Registry Artifact Analysis

analyzing-windows-registry-for-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract and examine Windows Registry hives from forensic images to reveal installed software, autorun entries, USB history, and user activity, supporting incident response or insider threat investigations with RegRipper, python-registry, and hash validation workflows.

Timesketch Incident Timeline

building-incident-timeline-with-timesketch

mukul975/Anthropic-Cybersecurity-Skills

Leverage Timesketch to ingest multi-source logs via Plaso or CSV/JSONL, normalize them into searchable timelines, and collaboratively reconstruct attack chains with analyzers, tagging, and story-building for thorough incident investigations.

Diamond Model Intrusion Analysis

executing-diamond-model-analysis

mukul975/Anthropic-Cybersecurity-Skills

Structures completed intrusion investigations with the Diamond Model by documenting adversaries, capabilities, infrastructure, and victims plus their relationships, metadata, and pivots to cluster incidents and support campaign attribution, confidence scoring, and analytic write-ups.

Credential Extraction Memory Dump

extracting-credentials-from-memory-dump

mukul975/Anthropic-Cybersecurity-Skills

Use Volatility, Mimikatz, and pypykatz to recover cached credentials, hashes, and Kerberos tickets from Windows memory dumps for incident response, breach scope analysis, and forensic investigations.

Language