detecting-ransomware-precursors-in-network
mukul975/Anthropic-Cybersecurity-Skills
Detects pre-encryption ransomware activity across network traffic using Zeek, Suricata, Arkime, SIEM rules, and threat feeds to flag IAB behavior, Cobalt Strike beacons, credential harvesting, and staging before damage occurs.