Download

Skill UI

Browse and discover 6058+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Lateral-Movement , found 30 results

Default Newest Most Downloaded

Detecting Stuxnet Attacks

detecting-stuxnet-style-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detect Stuxnet-style multi-stage OT attacks by monitoring PLC logic integrity, engineering workstations, USB vectors, IT-to-OT lateral movement, and physics-based process anomalies to thwart nation-state level threats.

EDR Credential Dumping Detection

detecting-t1003-credential-dumping-with-edr

mukul975/Anthropic-Cybersecurity-Skills

Detects credential dumping T1003 activity by correlating EDR telemetry, Sysmon process access, and Windows security events to flag suspicious LSASS, SAM, NTDS, and cached credential access, guiding SOCs through containment and lateral movement analysis.

Kerberos Constrained Delegation Abuse

exploiting-constrained-delegation-abuse

mukul975/Anthropic-Cybersecurity-Skills

Documented methodology for finding Active Directory accounts with constrained delegation and abusing their S4U2self/S4U2proxy flows via Rubeus or Impacket to impersonate privileged users, steal service tickets, and extend lateral movement in red-team engagements.

SMB Exploitation Playbook

exploiting-smb-vulnerabilities-with-metasploit

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized testers through SMB-focused assessments with Metasploit and complementary tools, covering enumeration, vulnerability scanning, EternalBlue exploitation, relay attacks, pass-the-hash lateral movement, and post-exploitation clean-up.

Windows Event Log Forensics

extracting-windows-event-logs-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Extract, parse, and analyze EVTX files with Chainsaw, Hayabusa, and EvtxECmd to uncover lateral movement, persistence, and privilege escalation during incident response and forensic investigations.

WMI Lateral Movement Hunting

hunting-for-lateral-movement-via-wmi

mukul975/Anthropic-Cybersecurity-Skills

Detect WMI-based lateral movement by correlating Windows Event ID 4688 process creation logs with Sysmon Event ID 1, tagging WmiPrvSE.exe child processes, suspicious command lines, and persistent WMI event subscriptions for a clear incident timeline.

Network Deception Honeypots

implementing-network-deception-with-honeypots

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying and managing OpenCanary, Cowrie, and T-Pot honeypots to detect lateral movement, alert on unauthorized scanning, capture attacker commands, and feed SIEMs, with planning, configuration, monitoring, and maintenance steps.

Firewall Zone Network Segmentation

implementing-network-segmentation-with-firewall-zones

mukul975/Anthropic-Cybersecurity-Skills

Design network segmentation with firewall security zones, VLANs, ACLs, and microsegmentation so teams can map traffic, enforce least-privilege access, and halt lateral movement while satisfying compliance such as PCI DSS or HIPAA.

SIEM Correlation Rule Builder

implementing-siem-correlation-rules-for-apt

mukul975/Anthropic-Cybersecurity-Skills

Crafts Splunk/Sigma-based SIEM correlation rules to detect APT lateral movement by chaining Windows authentication, process execution, and network telemetry across hosts, automating sigma-cli conversion and Splunk ES API deployment.

Active Directory Investigation

performing-active-directory-compromise-investigation

mukul975/Anthropic-Cybersecurity-Skills

Investigate Active Directory breaches by analyzing authentication logs, Kerberos anomalies, NTDS.dit integrity, Group Policy changes, and privileged group edits to uncover persistence and lateral movement paths.

Active Directory Vulnerability Assessment

performing-active-directory-vulnerability-assessment

mukul975/Anthropic-Cybersecurity-Skills

Assess Active Directory security posture with PingCastle, BloodHound, and Purple Knight to identify misconfigurations, privilege escalation paths, Kerberos weaknesses, and lateral movement risks so remediation can be prioritized.

Cloud Incident Containment

performing-cloud-incident-containment-procedures

mukul975/Anthropic-Cybersecurity-Skills

Orchestrates cloud-native incident containment across AWS, Azure, and GCP by isolating compromised compute and storage, revoking credentials, preserving evidence, and enforcing strict network controls to stop lateral movement.

Language