Download

Skill UI

Browse and discover 6170+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search MITRE ATT&CK , found 32 results

Default Newest Most Downloaded

Red Team Tactics Guide

red-team-tactics

sickn33/antigravity-awesome-skills

Provides MITRE ATT&CK-based red team principles covering reconnaissance, access, escalation, evasion, movement, reporting, and ethics to guide authorized adversary simulations and defensive validation.

MITRE Navigator APT Analysis

analyzing-apt-group-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Programmatically query ATT&CK data, map APT techniques to MITRE Navigator layers, and surface detection gaps with heatmaps and intelligence for detection engineering teams.

Analyzing Malware Sandbox Evasion

analyzing-malware-sandbox-evasion-techniques

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Cuckoo and AnyRun behavior reports to detect sandbox evasion checks such as timing APIs, VM artifacts, user interaction gaps, and sleep inflation, scoring sophistication and mapping to MITRE ATT&CK T1497 for SOC investigations.

MITRE Attack TTP Mapping

analyzing-threat-actor-ttps-with-mitre-attack

mukul975/Anthropic-Cybersecurity-Skills

Guides analysts through locating threat actor TTPs, mapping them to the ATT&CK framework, generating Navigator coverage layers, and producing intelligence summaries to validate detection coverage.

Mitre Navigator TTP Mapping

analyzing-threat-actor-ttps-with-mitre-navigator

mukul975/Anthropic-Cybersecurity-Skills

Combines ATT&CK Navigator with attackcti to pull STIX/TAXII data for APT groups, produce annotated layer files, and contrast technique coverage so analysts can prioritize hunting, detection rule work, and defense planning.

Attack Pattern Library Builder

building-attack-pattern-library-from-cti-reports

mukul975/Anthropic-Cybersecurity-Skills

Parses cyber threat intelligence reports to extract adversary behaviors, map them to MITRE ATT&CK techniques, and assemble STIX 2.1 attack pattern objects so detection engineers can catalog tactics, techniques, and actors for rule generation.

Sigma Detection Rule Builder

building-detection-rules-with-sigma

mukul975/Anthropic-Cybersecurity-Skills

Creates portable Sigma detection rules from threat intelligence, validating syntax and converting to Splunk, Elastic, or Sentinel queries so SOC teams can map rules to MITRE ATT&CK and reuse them in CI/CD pipelines.

Ransomware SOC Playbook

building-soc-playbook-for-ransomware

mukul975/Anthropic-Cybersecurity-Skills

Creates a structured SOC ransomware response playbook with detection queries, triage decision trees, containment APIs, and evidence collection tied to NIST SP 800-61 and MITRE ATT&CK so teams can rehearse consistent procedures.

Threat Actor Profiling OSINT

building-threat-actor-profile-from-osint

mukul975/Anthropic-Cybersecurity-Skills

Build detailed threat actor dossiers by aggregating OSINT sources, linking infrastructure through Maltego/SpiderFoot, mapping MITRE ATT&CK TTPs, and surfacing intelligence that informs proactive defense decisions.

Cloud Penetration Testing Guide

conducting-cloud-penetration-testing

mukul975/Anthropic-Cybersecurity-Skills

Provides a methodology for authorized penetration testing across AWS, Azure, and GCP clouds, detailing scope definition, reconnaissance with ScoutSuite/Prowler, IAM privilege escalation via Pacu, SSRF metadata access, and MITRE ATT&CK Cloud-aligned reporting.

Comprehensive Red Team Engagement

conducting-full-scope-red-team-engagement

mukul975/Anthropic-Cybersecurity-Skills

Guides planning and execution of a full-scope red team engagement from reconnaissance through post-exploitation, using MITRE ATT&CK-aligned TTPs to measure an organization’s detection and response readiness with scripted phases and artifact collection.

Evasion Detection Toolkit

detecting-evasion-techniques-in-endpoint-logs

mukul975/Anthropic-Cybersecurity-Skills

Guides security analysts through endpoint log use cases for detecting defense evasion tactics such as log tampering, timestomping, process injection, masquerading, LOLBin abuse, and security tool disabling to support hunting, rule development, and investigation aligned with MITRE ATT&CK TA0005.

Language