Download

Skill UI

Browse and discover 6581+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Intelligence , found 83 results

Default Newest Most Downloaded

C2 Communication Analysis

analyzing-command-and-control-communication

mukul975/Anthropic-Cybersecurity-Skills

Dissects malware command-and-control channels to understand beacon rhythms, command structures, data encoding, and infrastructure for detection development and threat intelligence workflows.

IOC Enrichment Workflow

analyzing-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Enriches IOC artifacts with VirusTotal, AbuseIPDB, MalwareBazaar, and MISP intelligence to assess malicious confidence, campaign attribution, and blocking priority when triaging phishing alerts, threat feeds, or incident investigations.

Ransomware Leak Intelligence

analyzing-ransomware-leak-site-intelligence

mukul975/Anthropic-Cybersecurity-Skills

Collect structured intelligence from ransomware leak sites, track victim postings and group activity, and surface sector-specific risk for proactive SOC defense.

Threat Actor ATT&CK Mapping

analyzing-threat-actor-ttps-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Automates mapping threat actor behaviors to MITRE ATT&CK, builds Navigator heatmaps to highlight detection gaps, and generates structured IOC-backed intelligence for SOC analysts and hunters.

Threat Intelligence Feed Analysis

analyzing-threat-intelligence-feeds

mukul975/Anthropic-Cybersecurity-Skills

Analyzes structured and unstructured threat intelligence feeds to extract indicators, normalize data into STIX 2.1, enrich IOCs, deduplicate, and distribute via TAXII to SIEM/EDR systems—ideal for assessing CTI feed quality or automating feed ingestion pipelines.

IOC Enrichment Automation

automating-ioc-enrichment

mukul975/Anthropic-Cybersecurity-Skills

Automates enrichment of indicators of compromise with multi-source threat intelligence via SOAR playbooks or Python pipelines to speed SIEM alert triage and bulk IOC processing.

Adversary Infrastructure Tracker

building-adversary-infrastructure-tracking-system

mukul975/Anthropic-Cybersecurity-Skills

Automates discovery and monitoring of threat actor C2 infrastructure by ingesting passive DNS, certificate transparency, WHOIS, and IP enrichment data to build a continuously updated graph of related domains, hosts, and registrars for intelligence or incident response teams.

IOC Defanging Sharing Pipeline

building-ioc-defanging-and-sharing-pipeline

mukul975/Anthropic-Cybersecurity-Skills

Automate ingestion, normalization, defanging, STIX enrichment, and TAXII/MISP distribution of raw IoCs to safely share threat intelligence across teams and platforms.

OSINT Threat Actor Profiling

building-threat-actor-profile-from-osint

mukul975/Anthropic-Cybersecurity-Skills

Aggregates public intelligence sources, vendor reports, and link-analysis tools like Maltego and SpiderFoot to craft structured threat actor dossiers, map TTPs via ATT&CK, and inform proactive defense and attribution workflows.

Threat Hunt Hypothesis Framework

building-threat-hunt-hypothesis-framework

mukul975/Anthropic-Cybersecurity-Skills

Systematically turn threat intelligence, attack patterns, and telemetry into testable queries so SOC teams can proactively hunt, validate, and report on attacks during threat assessments, purple team exercises, or incident response.

Splunk Threat Intelligence Enrichment

building-threat-intelligence-enrichment-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Automate Splunk ES threat intelligence enrichment by ingesting external feeds, normalizing IOCs into KV Store collections, and running lookup-based correlation searches so SOC analysts get immediate context from multiple sources.

Threat Intel Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates the ingestion, normalization, and distribution of STIX/TAXII and open-source threat intelligence feeds into SIEM and detection platforms for real-time IOC matching, scoring, and alerting used by SOC teams.

Prev 1 2 345 6 7 Next

Language