Download

Skill UI

Browse and discover 6034+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Lateral Movement , found 30 results

Default Newest Most Downloaded

Network Incident Traffic Analysis

analyzing-network-traffic-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Analyzes PCAP captures, Zeek logs, and NetFlow flow data to uncover command-and-control, lateral movement, and exfiltration during security incidents; supports packet-level validation and IOC extraction for triage and response teams.

Malware Network Traffic Analysis

analyzing-network-traffic-of-malware

mukul975/Anthropic-Cybersecurity-Skills

Analyzes malware-generated network traffic from sandbox or incident captures using Wireshark, Zeek, and Suricata to highlight C2 protocols, data exfiltration paths, lateral movement hints, and detection signature opportunities.

Splunk Windows Threat Detection

analyzing-windows-event-logs-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Runs SPL queries against Windows Security, System, and Sysmon logs in Splunk to flag authentication attacks, privilege escalations, persistence, and lateral movement, helping SOC analysts, detection engineers, and responders build investigations and timelines.

Internal Network Pentest Guide

conducting-internal-network-penetration-test

mukul975/Anthropic-Cybersecurity-Skills

Guide for executing an internal network penetration test from an assumed-breach position to map lateral movement paths, escalate privileges, harvest credentials, and reveal sensitive data exposure inside a corporate LAN.

Pass-the-Ticket Attack

conducting-pass-the-ticket-attack

mukul975/Anthropic-Cybersecurity-Skills

Guides red-teamers through extracting Kerberos tickets from LSASS, exporting and injecting them to impersonate users, and using those stolen tickets for lateral movement in compromised environments.

Microsegmentation For Zero Trust

configuring-microsegmentation-for-zero-trust

mukul975/Anthropic-Cybersecurity-Skills

Designing and enforcing microsegmentation policies within a zero trust architecture to prevent lateral movement, covering discovery and labeling, allow-list modeling, incremental enforcement, and validation with tools like Illumio and VMware NSX.

Active Breach Containment

containing-active-breach

mukul975/Anthropic-Cybersecurity-Skills

Executes containment strategies to halt active adversary behavior during confirmed breaches by segmenting the network, isolating endpoints, revoking credentials, and tightening access controls to prevent lateral movement and ongoing damage.

Historian Attack Detection

detecting-attacks-on-historian-servers

mukul975/Anthropic-Cybersecurity-Skills

Detects cyber attacks targeting OT historian servers (OSIsoft PI, Ignition, Wonderware) that bridge IT/OT networks, flagging unauthorized queries, data tampering, lateral movement, and historian-specific vulnerability exploitation for rapid incident response.

Azure Lateral Movement Detection

detecting-azure-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detect Azure AD/Entra ID lateral movement by correlating Microsoft Graph audit logs, sign-in anomalies, and Sentinel KQL rules to surface credential abuse, token theft, and cross-tenant pivots, then automate responses via playbooks.

Lateral Movement Detection

detecting-lateral-movement-in-network

mukul975/Anthropic-Cybersecurity-Skills

Analyzes authentication logs, SMB flows, RDP sessions, and Zeek data to spot MITRE ATT&CK lateral movement techniques, powering SIEM alerts, hunting, and post-compromise investigations in enterprise networks.

Splunk Lateral Movement Hunt

detecting-lateral-movement-with-splunk

mukul975/Anthropic-Cybersecurity-Skills

Guide to hunting adversary lateral movement with Splunk SPL against Windows authentication, SMB flow, and remote service abuse logs, helping SOCs detect unusual logon graphs, anomalous service accounts, and scripted propagation.

Service Account Abuse Detection

detecting-service-account-abuse

mukul975/Anthropic-Cybersecurity-Skills

Provides a detection workflow for service account abuse by leveraging EDR and SIEM telemetry to hunt for anomalous logons, lateral movement, privilege escalation, and unauthorized access, aiding proactive hunting, incident response, and purple team exercises.

Language