Download

Skill UI

Browse and discover 7044+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search MES , found 367 results

Default Newest Most Downloaded

Container Escape Detection

detecting-container-escape-attempts

mukul975/Anthropic-Cybersecurity-Skills

Blueprint for using runtime monitoring (Falco, auditd, custom rules) to spot namespace/capability abuse, sensitive mounts, and syscalls that signal container escape attempts.

Endpoint Evasion Detection

detecting-evasion-techniques-in-endpoint-logs

mukul975/Anthropic-Cybersecurity-Skills

Detect defense-evasion techniques in endpoint logs by identifying log tampering, timestomping, process injection, security-tool disabling, and masquerading; use in threat hunting, detection engineering, or investigations that query telemetry from Sysmon, SIEM, or EDR.

DNS Exfiltration Detection with Zeek

detecting-exfiltration-over-dns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Zeek dns.log to flag DNS tunneling by computing subdomain entropy, long labels, unique counts and query volumes, scoring domains and emitting structured JSON reports for SOC investigations and monitoring validation.

Kerberos Golden Ticket Hunt

detecting-golden-ticket-attacks-in-kerberos-logs

mukul975/Anthropic-Cybersecurity-Skills

Analyze domain controller Kerberos/TGT logs to detect Golden Ticket anomalies such as RC4 encryption, impossible lifetimes, forged PACs, and missing TGT events, enabling SOCs to hunt post-breach persistence or credential theft across AD environments.

Kerberos Golden Ticket Detection

detecting-golden-ticket-forgery

mukul975/Anthropic-Cybersecurity-Skills

Detect Kerberos Golden Ticket forgery by analyzing Windows Event ID 4769 RC4 downgrades, orphaned TGS requests, and abnormal lifetimes in Splunk or Elastic SIEM to alert on credential-theft attacks.

Modbus Command Injection Detection

detecting-modbus-command-injection-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detect Modbus command injection attacks in OT/ICS environments by monitoring unauthorized write operations, anomalous function codes, malformed frames, and baseline deviations with IDS and deep packet inspection.

Detecting Pass-the-Ticket

detecting-pass-the-ticket-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detect Kerberos Pass-the-Ticket attacks by correlating Windows Security Event IDs 4768, 4769, and 4771 inside Splunk or Elastic SIEM, flagging ticket reuse, RC4 downgrades, and unusual service ticket volumes for SOC hunting and coverage validation.

Kubernetes Privilege Escalation Detection

detecting-privilege-escalation-in-kubernetes-pods

mukul975/Anthropic-Cybersecurity-Skills

Monitors Kubernetes pods for privilege escalation by combining admission controls (Pod Security Admission, OPA Gatekeeper) with Falco runtime rules on capabilities, setuid binaries, and namespace usage so SOC analysts can block risky containers and hunt threats.

Mobile Deep Link Exploitation

exploiting-deeplink-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides security testers through discovering and abusing Android and iOS deep link handling flaws—custom URI schemes, App/Universal Links, intent hijacking, and WebView payloads—to evaluate unauthorized access and injection risks in mobile apps.

WebSocket Vulnerability Testing

exploiting-websocket-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Guides penetration testers through discovering endpoints, validating authentication, checking for CSWSH, and probing message injection flaws in WebSocket implementations using Burp Suite, wscat/websocat, and custom Python scripts during authorized assessments.

Threat Intelligence Report Generator

generating-threat-intelligence-reports

mukul975/Anthropic-Cybersecurity-Skills

Generates structured finished intelligence products across strategic, operational, tactical, and flash formats with templates, TLP controls, and tailored messaging for executives, security leaders, and analysts when turning raw collection into actionable reporting.

Docker Daemon Hardening

hardening-docker-daemon-configuration

mukul975/Anthropic-Cybersecurity-Skills

Provides guidelines for hardening the Docker daemon via daemon.json tweaks, user namespace remapping, TLS auth, rootless mode, and CIS benchmark settings to secure container hosts during deployment or assessments.

Prev 1 2 3...18 19 202122 23 24...29 30 31 Next

Language