Download

Skill UI

Browse and discover 6252+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Monitor , found 495 results

Default Newest Most Downloaded

Detecting ARP Poisoning

detecting-arp-poisoning-in-network-traffic

mukul975/Anthropic-Cybersecurity-Skills

Guide to detect and prevent ARP poisoning attacks using ARPWatch, Dynamic ARP Inspection, Wireshark filters, and Python monitoring so analysts can spot man-in-the-middle spoofing in local networks.

BEC Detection Guide

detecting-business-email-compromise

mukul975/Anthropic-Cybersecurity-Skills

Provides procedures and indicators for spotting business email compromise via gateway rules, behavioral analytics, and finance controls so SOC teams can hunt threats, verify monitoring coverage, and prevent fraudulent payments.

GuardDuty Cloud Threat Detection

detecting-cloud-threats-with-guardduty

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through deploying Amazon GuardDuty with protection plans for S3, EKS, EC2 runtime monitoring, and Lambda, interpreting findings, and wiring EventBridge plus Lambda for automated responses across AWS accounts.

Runtime Container Drift Detection

detecting-container-drift-at-runtime

mukul975/Anthropic-Cybersecurity-Skills

Detect unauthorized modifications to running containers by monitoring binary execution, filesystem writes, configuration changes, and package activity, using Falco rules and Kubernetes policies to maintain immutable workloads.

Container Escape Detection

detecting-container-escape-attempts

mukul975/Anthropic-Cybersecurity-Skills

Detects container escape attempts via runtime monitoring using Falco, Sysdig, and custom audit rules. Monitors syscalls, mounts, kernel modules, and Docker socket accesses so SOC teams can hunt escapes and validate detection coverage.

Falco Container Escape Detection

detecting-container-escape-with-falco-rules

mukul975/Anthropic-Cybersecurity-Skills

Falco container escape detection rules monitor syscalls, file writes, namespace access, and privileged launches to catch breakout attempts across Kubernetes or standalone containerd/Docker hosts, helping SOC analysts hunt escapes and validate monitoring coverage.

EDR Credential Dumping Detection

detecting-credential-dumping-with-edr

mukul975/Anthropic-Cybersecurity-Skills

Provides analysts with a workflow to hunt and investigate credential dumping (LSASS, SAM, NTDS, DCSync) using EDR telemetry, Sysmon access events, and AD replication monitoring.

Detect DCSync in AD

detecting-dcsync-attack-in-active-directory

mukul975/Anthropic-Cybersecurity-Skills

Detects DCSync abuse in Active Directory by monitoring replication requests, correlating RPC traffic, and flagging non-domain-controller accounts before credential theft can spread.

Detect DLL Sideloading

detecting-dll-sideloading-attacks

mukul975/Anthropic-Cybersecurity-Skills

Guide for hunting DLL side-loading attacks by monitoring DLL load events, validating hashes, and correlating process behavior to detect malicious replacements.

Detect DNP3 Anomalies

detecting-dnp3-protocol-anomalies

mukul975/Anthropic-Cybersecurity-Skills

Detect anomalies in SCADA DNP3 traffic by monitoring for unauthorized control commands, protocol violations, firmware update attempts, and unusual baselines through deep packet inspection and ML-enabled heuristics.

Detecting DNS Exfiltration

detecting-dns-exfiltration-with-dns-query-analysis

mukul975/Anthropic-Cybersecurity-Skills

Builds a detection capability to flag data exfiltration via DNS tunneling by analyzing query entropy, subdomain metrics, query volume, TXT responses, and payload sizes using passive DNS monitoring plus statistical checks.

Living Off Land Detection

detecting-living-off-the-land-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detects suspicious use of legitimate Windows binaries (LOLBins) by monitoring process creation, command-line arguments, parent relationships, and network events, supporting Sysmon, Sigma, and SIEM workflows when hunting fileless/living-off-the-land attacks.

Prev 1 2 3...32 33 343536 37 38...40 41 42 Next

Language