Download

Skill UI

Browse and discover 6565+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Logs , found 182 results

Default Newest Most Downloaded

Kubernetes Audit Analyzer

analyzing-kubernetes-audit-logs

mukul975/Anthropic-Cybersecurity-Skills

Parses Kubernetes API server audit logs to surface exec-into-container activity, secret access, RBAC changes, privileged pod launches, and anonymous calls, helping SOC teams hunt threats or validate SIEM coverage for cluster compromises.

Linux Audit Intrusion Detection

analyzing-linux-audit-logs-for-intrusion

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Linux auditd logs with ausearch/aureport to spot intrusion attempts, privilege escalations, and tampering while supporting rule tuning and SIEM integration for host-based investigations.

Linux Artifact Analysis

analyzing-linux-system-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Analyze Linux system artifacts such as auth logs, cron jobs, shell histories, and configuration files to identify persistence mechanisms, trace user activity, and detect unauthorized modifications during investigations.

Malicious URL Analysis Workflow

analyzing-malicious-url-with-urlscan

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step guide for using URLScan.io via web UI and API to investigate phishing and credential-harvesting URLs, capture page screenshots, DOM, network logs, and certificates, extract IOCs, and correlate results with VirusTotal, PhishTank, and Google Safe Browsing while keeping analysts isolated.

Incident Network Traffic Analysis

analyzing-network-traffic-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Examines packet captures, Zeek logs, and NetFlow data to uncover C2 channels, lateral movement, and exfiltration during security incidents, guiding analysts through capture, filtering, and IOC extraction workflows.

Office 365 Audit Compromise Analysis

analyzing-office365-audit-logs-for-compromise

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Office 365 audit logs via Microsoft Graph to detect inbox rules, email forwarding, delegation changes, OAuth grants, and other compromise indicators for security investigations and monitoring.

PowerShell Empire Artifact Detection

analyzing-powershell-empire-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows event logs for PowerShell Empire artifacts such as default launcher strings, Base64 stagers, known module invocations, and staging URLs to support threat hunting and detection tuning.

PowerShell Script Block Analysis

analyzing-powershell-script-block-logging

mukul975/Anthropic-Cybersecurity-Skills

Parses Windows PowerShell Script Block Logs (Event ID 4104) to reconstruct multi-block scripts, detect obfuscated and encoded payloads, and flag living-off-the-land behaviors, helping SOC teams hunt threats and validate monitoring coverage with MITRE ATT&CK mappings.

Splunk Log Analysis

analyzing-security-logs-with-splunk

mukul975/Anthropic-Cybersecurity-Skills

Uses Splunk Enterprise Security and SPL to correlate cross-source logs, trace authentication and lateral movement, monitor proxies and firewalls, and build incident timelines or detection rules when investigating compromises.

Certificate Transparency Monitoring

analyzing-tls-certificate-transparency-logs

mukul975/Anthropic-Cybersecurity-Skills

Monitors crt.sh certificate transparency logs via pycrtsh to detect phishing domains, unauthorized issuance, typosquatting, and shadow IT, enabling SOC analysts to proactively hunt for suspicious certificates and validate monitoring coverage.

USB Device Connection Forensics

analyzing-usb-device-connection-history

mukul975/Anthropic-Cybersecurity-Skills

Analyzing USB device connection history by extracting Windows registry hives, SetupAPI logs, and event logs to track removable media usage during incidents or insider investigations.

Web Log Intrusion Detection

analyzing-web-server-logs-for-intrusion

mukul975/Anthropic-Cybersecurity-Skills

Parses Apache/Nginx access logs to spot SQL injection, LFI, XSS, scanner fingerprints, and brute-force patterns through OWASP-aware regex, GeoIP enrichment, and anomaly scoring, then produces a prioritized findings report for SOC analysts.

Prev 1 2 3...6 7 8910 11 12...14 15 16 Next

Language