Download

Skill UI

Browse and discover 6556+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Indicators , found 52 results

Default Newest Most Downloaded

Threat Intelligence Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion of STIX/TAXII and open-source threat feeds into SIEM and detection platforms, normalizing, deduplicating, and scoring IOCs so SOC teams can match indicators in real time.

Collecting IOCs

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Systematically gather, enrich, score, and share indicators of compromise (IOCs) from network, host, email, and behavioral evidence to support incident response, detection tuning, and intelligence dissemination using STIX/TAXII and threat platforms.

Phishing Incident Response

conducting-phishing-incident-response

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through analyzing reported phishing emails, extracting indicators, sandboxing malicious content, purging mailboxes, and remediating compromised accounts across Microsoft 365 or Google Workspace environments.

Threat Campaign Correlation

correlating-threat-campaigns

mukul975/Anthropic-Cybersecurity-Skills

Correlates incidents, IOCs, and adversary behaviors across time and organizations to assemble campaign-level intelligence, attribute threat actors, and pinpoint shared indicators for improved detection.

ARP Poisoning Detection

detecting-arp-poisoning-in-network-traffic

mukul975/Anthropic-Cybersecurity-Skills

Provides layered ARP poisoning detection by tying ARPWatch, Dynamic ARP Inspection, Wireshark filters, and custom Python monitoring together to surface mitm indicators in local network segments.

Detect Azure Lateral Movement

detecting-azure-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detect Azure AD lateral movement by correlating Microsoft Graph audit logs, Sentinel KQL analytics, and sign-in anomalies to spot service principal abuse, stolen tokens, and cross-tenant pivots, then report indicators and containment steps.

Cloud Credential Threat Detection

detecting-compromised-cloud-credentials

mukul975/Anthropic-Cybersecurity-Skills

Detect compromised AWS, Azure, and GCP credentials by analyzing GuardDuty, Defender, and SCC insights along with logs to surface anomalous API use, impossible travel, and credential abuse indicators during investigations.

Container Escape Detection

detecting-container-escape-attempts

mukul975/Anthropic-Cybersecurity-Skills

Detects container escape attempts by monitoring syscall, file, process, network, and audit indicators with runtime tools like Falco, Sysdig, and custom rules to alert on privileged mounts, Docker socket access, sensitive proc paths, cgroup writes, and kernel module loading.

Detect DNS Data Exfiltration

detecting-exfiltration-over-dns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek dns.log to find high-entropy subdomains, long labels, and query volume anomalies, score suspicious domains, and report indicators so analysts can catch DNS-based exfiltration tools.

Insider Threat Detection

detecting-insider-threat-behaviors

mukul975/Anthropic-Cybersecurity-Skills

Proactively hunts for insider threat indicators by correlating SIEM and EDR telemetry, validating hypotheses from threat intelligence, and documenting detection findings to guide response during campaigns that feature unauthorized data access, privilege abuse, or resignation-related exfiltration.

Mobile Malware Behavior

detecting-mobile-malware-behavior

mukul975/Anthropic-Cybersecurity-Skills

Analyzes suspicious mobile apps by correlating static indicators, automated MobSF reports, network captures, and Frida instrumentation to surface permission abuse, data exfiltration, and command-and-control behavior during incident response or triage.

Ransomware Precursors Detection

detecting-ransomware-precursors-in-network

mukul975/Anthropic-Cybersecurity-Skills

Detects early-stage ransomware indicators across network traffic using Zeek/Suricata/Arkime and SIEM correlation, enabling teams to flag Cobalt Strike, Mimikatz or RDP brute-force behaviors before encryption starts.

Prev 1 234 5 Next

Language