Download

Skill UI

Browse and discover 6556+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Incident Investigation , found 31 results

Default Newest Most Downloaded

Diamond Model Intrusion Analysis

executing-diamond-model-analysis

mukul975/Anthropic-Cybersecurity-Skills

Structures completed intrusion investigations with the Diamond Model by documenting adversaries, capabilities, infrastructure, and victims plus their relationships, metadata, and pivots to cluster incidents and support campaign attribution, confidence scoring, and analytic write-ups.

Automating Phishing SOAR

implementing-soar-playbook-for-phishing

mukul975/Anthropic-Cybersecurity-Skills

Automates phishing incident response by parsing reported emails, creating Splunk SOAR containers and artifacts, triggering investigation playbooks, and polling REST API action results so external tools can orchestrate triage.

Velociraptor IR Collection

implementing-velociraptor-for-ir-collection

mukul975/Anthropic-Cybersecurity-Skills

Deploy and tune Velociraptor across Windows, Linux, and macOS to collect forensic artifacts via VQL, hunts, and artifact packs, enabling incident response teams to scale endpoint investigations with centralized control and minimal impact.

Ransomware Artifact Investigation

investigating-ransomware-attack-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Identify, collect, and analyze ransomware attack artifacts immediately after an incident to determine the variant, timeline, initial access path, and viable recovery or decryption options while preserving forensic evidence for legal or insurance follow-up.

Dark Web Threat Monitoring

monitoring-darkweb-sources

mukul975/Anthropic-Cybersecurity-Skills

Tracks dark web forums, leak sites, pastebins, and ransomware portals for organization-related data leaks, credential exposures, and threat actor chatter to support proactive intel, incident investigations, and breach validation with secure operational procedures.

Active Directory Compromise Investigation

performing-active-directory-compromise-investigation

mukul975/Anthropic-Cybersecurity-Skills

Investigate Active Directory compromises by analyzing authentication logs, replication metadata, Group Policy changes, Kerberos anomalies, and privileged group tampering to reconstruct attacker persistence and lateral movement paths during incident response.

Cloud Forensics Investigation

performing-cloud-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Guides investigators through AWS/Azure/GCP forensic workflows, covering evidence preservation, log collection, IAM analysis, and incident response to trace breaches in cloud environments.

AWS CloudTrail Forensics

performing-cloud-forensics-with-aws-cloudtrail

mukul975/Anthropic-Cybersecurity-Skills

Guide for using CloudTrail logs, boto3, Athena, and CLI tools to reconstruct AWS attacker activity, surface compromised credentials, and document API-based incident investigations when responding to cloud breaches.

Cloud Storage Forensic Acquisition

performing-cloud-storage-forensic-acquisition

mukul975/Anthropic-Cybersecurity-Skills

Perform forensic acquisition and analysis of cloud services such as Google Drive, OneDrive, Dropbox, and Box by combining API-based remote pulls with endpoint sync client artifacts to support investigations, incident response, and security assessments.

Container Escape Detection

performing-container-escape-detection

mukul975/Anthropic-Cybersecurity-Skills

Detects container escape attempts by examining Kubernetes pod security settings such as privileged mode, capabilities, namespace sharing, and hostPath mounts via the Python client, aiding audits or incident investigations.

Disk Forensics Investigation

performing-disk-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Conducts systematic disk forensics by imaging evidence, analyzing file systems, recovering deleted files and artifacts, and reconstructing timelines to support incident response and legal investigations involving hard drives and SSDs.

Endpoint Forensics Investigation

performing-endpoint-forensics-investigation

mukul975/Anthropic-Cybersecurity-Skills

Performs endpoint-focused digital forensics including memory acquisition, disk imaging, artifact analysis, and timeline reconstruction so teams can investigate compromises, gather court-ready evidence, and understand incident scope.

Language