Download

Skill UI

Browse and discover 6559+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search OT , found 1407 results

Default Newest Most Downloaded

Detect AWS IAM Escalation

detecting-aws-iam-privilege-escalation

mukul975/Anthropic-Cybersecurity-Skills

Detect AWS IAM privilege escalation paths with boto3 and Cloudsplaining-style policy analysis to flag dangerous permission combos, wildcard resources, and least-privilege violations for SOC hunting or monitoring validation.

Detect Azure Lateral Movement

detecting-azure-lateral-movement

mukul975/Anthropic-Cybersecurity-Skills

Detect Azure AD lateral movement by correlating Microsoft Graph audit logs, Sentinel KQL analytics, and sign-in anomalies to spot service principal abuse, stolen tokens, and cross-tenant pivots, then report indicators and containment steps.

Detect Azure Service Principal Abuse

detecting-azure-service-principal-abuse

mukul975/Anthropic-Cybersecurity-Skills

Provides detection workflows, queries, and investigation steps for spotting Azure service principal abuse in Microsoft Entra ID environments, covering credential updates, privileged role assignments, admin consent bypass, enumeration, and OAuth permission escalation via Sentinel or Splunk.

Zeek Beaconing Detection

detecting-beaconing-patterns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Zeek conn.log data with ZAT and Pandas to compute inter-arrival time statistics, flagging low-jitter periodic connections as potential C2 beaconing when hunting command-and-control callbacks.

Business Email Compromise Detection

detecting-business-email-compromise

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC analysts through detecting business email compromise by tuning email gateway rules, applying behavioral analytics, and enforcing financial controls to spot fraudulent payment, social-engineering, or account takeover attempts.

GuardDuty Cloud Threat Detection

detecting-cloud-threats-with-guardduty

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through deploying GuardDuty across AWS, enabling protection plans for S3, EKS, EC2 runtime, and Lambda, interpreting finding severities, and wiring EventBridge plus Lambda responses for automated containment.

DNP3 Anomaly Detection

detecting-dnp3-protocol-anomalies

mukul975/Anthropic-Cybersecurity-Skills

Monitors DNP3 traffic in SCADA energy OT networks to surface unauthorized control commands, firmware update attempts, and protocol deviations so IDS/ML rules can flag attacks fast.

Detect Email Account Compromise

detecting-email-account-compromise

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Microsoft 365 audit, inbox rule, and sign-in data to spot compromised O365 or Google Workspace accounts, flagging forwarding rules, suspicious Microsoft Graph API usage, and impossible-travel signals for faster incident response.

Email Forwarding Detection

detecting-email-forwarding-rules-attack

mukul975/Anthropic-Cybersecurity-Skills

Detect suspicious email forwarding rules that attackers use to maintain persistence and steal intelligence; guides analysts through hypothesis, data sourcing, multi-tool querying, and validation to hunt BEC and related threats.

Detect Fileless Endpoint Attacks

detecting-fileless-attacks-on-endpoints

mukul975/Anthropic-Cybersecurity-Skills

Provides step-by-step guidance for spotting fileless endpoint threats by enabling telemetry like Sysmon/AMSI, flagging PowerShell abuse, reflective DLL injection, WMI persistence, and registry-resident payloads so defenders can surface in-memory malware that traditional scanners miss.

Insider Threat Detection

detecting-insider-threat-behaviors

mukul975/Anthropic-Cybersecurity-Skills

Proactively hunts for insider threat indicators by correlating SIEM and EDR telemetry, validating hypotheses from threat intelligence, and documenting detection findings to guide response during campaigns that feature unauthorized data access, privilege abuse, or resignation-related exfiltration.

Lateral Movement Detection

detecting-lateral-movement-in-network

mukul975/Anthropic-Cybersecurity-Skills

Detects lateral movement across enterprise networks by correlating Windows security logs, Zeek flow/SMB traces, and SIEM rules to flag Pass-the-Hash, PsExec, and RDP pivots during incident response and hunting.

Prev 1 2 3...87 88 899091 92 93...116 117 118 Next

Language