Download

Skill UI

Browse and discover 5987+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Insider Threat , found 9 results

Default Newest Most Downloaded

Browser Artifact Analysis Tool

analyzing-browser-forensics-with-hindsight

mukul975/Anthropic-Cybersecurity-Skills

Hindsight parses Chromium browser artifacts to recover history, downloads, cookies, autofill entries, saved passwords, cache, extensions, and other web data, producing timelines or XLSX/JSON/SQLite reports for incident response, insider threat, and criminal investigations.

USB Connection History Analysis

analyzing-usb-device-connection-history

mukul975/Anthropic-Cybersecurity-Skills

Analyzes USB device connection history from Windows registry, event logs, and setupapi logs to trace removable media usage, correlate drive assignments, and support forensic or insider-threat investigations.

Windows Registry Artifact Analysis

analyzing-windows-registry-for-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract and examine Windows Registry hives from forensic images to reveal installed software, autorun entries, USB history, and user activity, supporting incident response or insider threat investigations with RegRipper, python-registry, and hash validation workflows.

CloudTrail Anomaly Detection

detecting-aws-cloudtrail-anomalies

mukul975/Anthropic-Cybersecurity-Skills

Detect suspicious API usage in AWS CloudTrail by querying events with boto3, building statistical baselines, and flagging anomalies such as new event sources, geographic shifts, frequent failures, and sensitive IAM/KMS/S3 calls to surface potential credential compromise or insider threat activity.

Insider Threat Detection

detecting-insider-threat-behaviors

mukul975/Anthropic-Cybersecurity-Skills

Detects insider threat behaviors by hunting for unusual data access, privilege abuse, mass downloads, and resignation-linked exfiltration across EDR, SIEM, and intelligence sources to guide incident response actions.

Detect Insider Threats

detecting-insider-threat-with-ueba

mukul975/Anthropic-Cybersecurity-Skills

Implements UEBA using Elasticsearch/OpenSearch to normalize authentication, file, and network logs, establish behavioral baselines, calculate anomaly scores through deviation and peer-group analysis, and correlate indicators into SOC-ready alerts for insider threat detection.

Insider Threat Indicators Investigation

investigating-insider-threat-indicators

mukul975/Anthropic-Cybersecurity-Skills

Investigates insider threat indicators such as data exfiltration, unauthorized access, and policy violations by correlating SIEM analytics, DLP alerts, UEBA signals, and HR data to build timelines when referrals or anomalies arise.

Insider Threat Investigation

performing-insider-threat-investigation

mukul975/Anthropic-Cybersecurity-Skills

Performs comprehensive investigations into insider threat incidents by pairing digital forensics, user behavior analytics, and HR/legal coordination to validate allegations, collect covert evidence, and support security actions when employees or trusted partners misuse privileged access.

User Behavior Analytics

performing-user-behavior-analytics

mukul975/Anthropic-Cybersecurity-Skills

Performs UEBA-based detection of impossible travel, unusual access, and privilege abuse so SOC teams can flag compromised accounts or insider threats by comparing recent behavior to SIEM baselines and statistical norms.

1

Language