Download

Skill UI

Browse and discover 6069+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search OT , found 1289 results

Default Newest Most Downloaded

Detect Email Compromise

detecting-email-account-compromise

mukul975/Anthropic-Cybersecurity-Skills

Analyze Microsoft 365 audit logs, inbox rules, sign-in data, and Graph API activity to spot compromised O365 and Google Workspace mailboxes, then report malicious forwarding, impossible travel, suspicious OAuth access, and containment steps.

Zeek DNS Exfiltration Detection

detecting-exfiltration-over-dns-with-zeek

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Zeek dns.log data to spot DNS-based exfiltration by measuring entropy, label length, subdomain volume, and query rates, then scores and reports suspicious domains for incident response.

Kerberos Golden Ticket Detection

detecting-golden-ticket-attacks-in-kerberos-logs

mukul975/Anthropic-Cybersecurity-Skills

Analyze domain controller Kerberos logs to spot Golden Ticket TGT anomalies such as RC4 encryption, impossible lifetimes, missing TGT requests, and forged PAC signatures, letting SOC teams hunt credential abuse and persistent AD footholds with Splunk or KQL queries.

Lateral Movement Detection

detecting-lateral-movement-in-network

mukul975/Anthropic-Cybersecurity-Skills

Analyzes authentication logs, SMB flows, RDP sessions, and Zeek data to spot MITRE ATT&CK lateral movement techniques, powering SIEM alerts, hunting, and post-compromise investigations in enterprise networks.

Splunk Lateral Movement Hunt

detecting-lateral-movement-with-splunk

mukul975/Anthropic-Cybersecurity-Skills

Guide to hunting adversary lateral movement with Splunk SPL against Windows authentication, SMB flow, and remote service abuse logs, helping SOCs detect unusual logon graphs, anomalous service accounts, and scripted propagation.

Modbus Injection Detection

detecting-modbus-command-injection-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detects Modbus command injection attacks in ICS by monitoring Modbus TCP/RTU traffic for unauthorized writes, anomalous function codes, and baseline deviations using IDS/protocol inspection so SOC analysts can flag FrostyGoop-style manipulations before they impact PLC operations.

Modbus Anomaly Detection

detecting-modbus-protocol-anomalies

mukul975/Anthropic-Cybersecurity-Skills

Detects Modbus/TCP and RTU anomalies by monitoring function codes, register ranges, timing, unauthorized clients, and malformed frames using Zeek, Suricata OT rules, and Python-based Markov models for deterministic industrial polling.

IDS Network Scan Detection

detecting-network-scanning-with-ids-signatures

mukul975/Anthropic-Cybersecurity-Skills

Detect reconnaissance tools such as Nmap and Masscan using Suricata/Snort IDS signatures, thresholds, and anomaly cues to alert on TCP/UDP scans, SYN/ACK probes, and other scan fingerprints before threat actors escalate.

OAuth Token Theft Detection

detecting-oauth-token-theft

mukul975/Anthropic-Cybersecurity-Skills

Analyzes OAuth sign-in telemetry via Microsoft Graph and Okta APIs to spot impossible travel, new device patterns, token replay from unusual IPs, and anomalous scope requests, enabling early detection of access token theft.

Privilege Escalation Detection

detecting-privilege-escalation-attempts

mukul975/Anthropic-Cybersecurity-Skills

Workflow for hunting privilege escalation attempts across Windows and Linux, leveraging EDR/SIEM telemetry to identify token manipulation, UAC bypasses, unquoted service paths, kernel exploits, and sudo/doas abuse.

Process Injection Detection

detecting-process-injection-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detects malicious process injection techniques through memory forensics, Sysmon/API monitoring, and behavioral signals, aiding EDR/SIEM teams in spotting DLL injection, hollowing, APC/thread hijacking, reflective loading, and similar stealthy attacks.

RDP Brute Force Detection

detecting-rdp-brute-force-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detect RDP brute-force attacks by parsing Windows Security EVTX logs, correlating Event ID 4625 failures with subsequent 4624 successes, spotting NLA bypass patterns, and summarizing source-IP trends for actionable alerts.

Prev 1 2 3...89 90 919293 94 95...106 107 108 Next

Language