Download

Skill UI

Browse and discover 7044+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search OT-Security , found 163 results

Default Newest Most Downloaded

Scapy Network Packet Analysis

analyzing-network-packets-with-scapy

mukul975/Anthropic-Cybersecurity-Skills

Use Scapy to craft, send, sniff, and dissect network packets for protocol analysis, reconnaissance, detecting SYN floods or DNS tunneling, and producing structured reports during authorized security testing.

Office 365 Audit Compromise Analysis

analyzing-office365-audit-logs-for-compromise

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Office 365 audit logs via Microsoft Graph to detect inbox rules, email forwarding, delegation changes, OAuth grants, and other compromise indicators for security investigations and monitoring.

Windows Event Log Analysis

analyzing-windows-event-logs-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Splunk-based Windows event log analysis helps SOC analysts inspect Security, System, and Sysmon data to spot authentication attacks, privilege escalation, persistence, and lateral movement with MITRE-mapped SPL searches.

SOC Escalation Matrix

building-soc-escalation-matrix

mukul975/Anthropic-Cybersecurity-Skills

Defines a structured SOC escalation matrix covering severity tiers, SLAs, escalation paths, and notification procedures so security teams can align response flows during incidents.

Open Source Threat Intel

collecting-open-source-intelligence

mukul975/Anthropic-Cybersecurity-Skills

Collects and synthesizes open-source intelligence on threat actors, malicious infrastructure, and campaigns using passive DNS, WHOIS, Shodan, Maltego, and SpiderFoot, supporting reconnaissance, enrichment of CTI reports, and pre-engagement assessments.

Prisma Access Zero Trust

deploying-palo-alto-prisma-access-zero-trust

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step guidance for deploying Palo Alto Networks Prisma Access to deliver SASE zero trust access via GlobalProtect agents, ZTNA Connectors, granular security policies, and Strata Cloud Manager orchestration for remote and branch users.

AWS IAM Escalation Detection

detecting-aws-iam-privilege-escalation

mukul975/Anthropic-Cybersecurity-Skills

Uses boto3 plus Cloudsplaining-style policy analysis to detect AWS IAM privilege escalation paths, highlight dangerous permission combinations, and deliver structured remediation guidance for SOC and security teams.

GuardDuty Cloud Threats

detecting-cloud-threats-with-guardduty

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through deploying and automating Amazon GuardDuty across AWS accounts, enabling advanced protection plans, interpreting severity levels, and triggering EventBridge/Lambda incident response playbooks for EC2, EKS, Lambda, and S3 workloads.

Detect OAuth Token Theft

detecting-oauth-token-theft

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through detecting and responding to OAuth token theft, covering Microsoft Entra ID/Azure AD protections, conditional access policies, and sign-in log investigations to block token replay, PRT abuse, and session hijacking in cloud deployments.

Quishing Detection Workflow

detecting-qr-code-phishing-with-email-security

mukul975/Anthropic-Cybersecurity-Skills

Provides a workflow for detecting QR-code-based phishing that embeds malicious URLs in email images by enabling image OCR, extracting and scanning QR URLs, sandboxing destinations, and extending protection to mobile users plus awareness training.

Detecting RDP Brute Force

detecting-rdp-brute-force-attacks

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Windows Security Event Logs to spot RDP brute-force patterns (Event IDs 4625/4624, NLA failures) and source IP frequency, then produces JSON reports for SOC analysts or detection rule tuning.

Detecting S3 Exfiltration

detecting-s3-data-exfiltration-attempts

mukul975/Anthropic-Cybersecurity-Skills

Detects unauthorized S3 mass downloads by correlating CloudTrail S3 events, GuardDuty findings, Macie alerts, and VPC logs, enabling security teams to spot cross-account transfers and respond swiftly.

Prev 1 2 3...5 6 789 10 11 12 13 14 Next

Language