Download

Skill UI

Browse and discover 6557+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Logs , found 182 results

Default Newest Most Downloaded

Windows Event Log Analysis

analyzing-windows-event-logs-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Detect Windows authentication attacks, privilege escalation, persistence, and lateral movement by running Splunk SPL queries mapped to MITRE ATT&CK techniques, supporting SOC hunting and forensic investigations.

Autonomous Review Loop

auto-review-loop

wanshuiyin/Auto-claude-code-research-in-sleep

Autonomously orchestrates multi-round research reviews via Codex MCP: review, implement fixes, and re-review until the reviewer declares the work ready or the max rounds expire. Logs progress, maintains compact/recoverable state, and optionally adds human checkpoints for iterative improvement requests.

Splunk Detection Rule Crafting

building-detection-rule-with-splunk-spl

mukul975/Anthropic-Cybersecurity-Skills

Guide to building effective Splunk SPL detection rules for SOC analysts, covering threshold, sequence, anomaly, lateral movement, exfiltration, and PowerShell patterns plus the correlation search workflow that turns logs into actionable notable events.

Timesketch Incident Timeline

building-incident-timeline-with-timesketch

mukul975/Anthropic-Cybersecurity-Skills

Build collaborative forensic incident timelines with Timesketch by ingesting multi-source logs, normalizing them into searchable sketches, and applying built-in analyzers to reconstruct attack chains during investigations.

Detecting Authentication Anomalies

detecting-anomalous-authentication-patterns

mukul975/Anthropic-Cybersecurity-Skills

Detects anomalous authentication patterns by normalizing logs across Azure AD, Okta, and Windows AD, then applying UEBA analytics and ML baselines to highlight impossible travel, credential stuffing, brute-force, password spraying, and other compromised-account behaviors.

Detect Azure Lateral Movement

detecting-azure-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detect Azure AD lateral movement by correlating Microsoft Graph audit logs, Sentinel KQL analytics, and sign-in anomalies to spot service principal abuse, stolen tokens, and cross-tenant pivots, then report indicators and containment steps.

Cloud Credential Threat Detection

detecting-compromised-cloud-credentials

mukul975/Anthropic-Cybersecurity-Skills

Detect compromised AWS, Azure, and GCP credentials by analyzing GuardDuty, Defender, and SCC insights along with logs to surface anomalous API use, impossible travel, and credential abuse indicators during investigations.

Credential Dump Detection

detecting-credential-dumping-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detect LSASS credential dumping, SAM hive exports, NTDS.dit theft, and comsvcs.dll/MiniDump abuse by correlating Sysmon Event ID 10, Windows Security logs, and SIEM queries for granted access patterns and known tool signatures.

DNS Exfiltration Detection

detecting-dns-exfiltration-with-dns-query-analysis

mukul975/Anthropic-Cybersecurity-Skills

Detect DNS tunneling data exfiltration by analyzing query entropy, subdomain length, query volumes, TXT abuse, and response payload sizes using passive DNS logs, enabling SOC analysts to hunt and validate DNS-based threats.

Endpoint Evasion Detection

detecting-evasion-techniques-in-endpoint-logs

mukul975/Anthropic-Cybersecurity-Skills

Detects adversary defense-evasion techniques in endpoint logs, covering log tampering, timestomping, process injection, and security tool disabling; useful for threat hunting, detection engineering, and incident response on Windows/EDR telemetry.

Detect Golden Ticket Attacks

detecting-golden-ticket-attacks

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows Security EVTX logs to detect Kerberos golden ticket assaults by correlating event IDs 4768, 4624, and 4672, flagging long-lived TGTs, privilege escalations without group changes, SID inconsistencies, and outputting a timeline-based report.

Kerberos Golden Ticket Detection

detecting-golden-ticket-attacks-in-kerberos-logs

mukul975/Anthropic-Cybersecurity-Skills

Detect Golden Ticket attacks in Active Directory by analyzing Kerberos TGT/TGS anomalies such as missing AS exchanges, unexpected encryption types, impossible lifetimes, non-existent SIDs, and forged PAC signatures, using SIEM queries for Splunk and KQL.

Prev 1 2 3...7 8 91011 12 13 14 15 16 Next

Language