Download

Skill UI

Browse and discover 6932+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search RSI , found 363 results

Default Newest Most Downloaded

DNS Persistence Hunting Guide

hunting-for-dns-based-persistence

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step skill to hunt DNS-based persistence by auditing zone baselines, querying SecurityTrails passive DNS, analyzing provider audit logs, and correlating anomalies to malicious infrastructure for actionable reports.

Detect WMI Lateral Movement

hunting-for-lateral-movement-via-wmi

mukul975/Anthropic-Cybersecurity-Skills

Hunt for WMI-based lateral movement by parsing Windows Event ID 4688 and Sysmon Event ID 1 logs, flagging WmiPrvSE.exe child processes, suspicious command lines, and WMI subscription persistence to produce a structured alert report.

Windows Persistence Hunting

hunting-for-persistence-mechanisms-in-windows

mukul975/Anthropic-Cybersecurity-Skills

Systematically hunt for Windows persistence across registry keys, services, scheduled tasks, WMI subscriptions, and other locations by collecting endpoint data, baselining legitimate entries, correlating process activity, and removing malicious footholds.

WMI Persistence Hunting

hunting-for-persistence-via-wmi-subscriptions

mukul975/Anthropic-Cybersecurity-Skills

Monitor and analyze Windows Management Instrumentation event subscriptions (filters, consumers, bindings) to detect and investigate fileless persistence mechanisms and attacker activity triggered via WMI, especially when other persistence traces are absent.

Process Injection Hunting

hunting-for-process-injection-techniques

mukul975/Anthropic-Cybersecurity-Skills

Hunts MITRE ATT&CK T1055 process-injection techniques via Sysmon Event IDs 8/10 and EDR telemetry, parsing JSON logs to flag CreateRemoteThread calls, risky access masks, and reporting severity with mitigation guidance.

Registry Persistence Hunt

hunting-for-registry-persistence-mechanisms

mukul975/Anthropic-Cybersecurity-Skills

Hunt for registry-based persistence artifacts such as Run keys, Winlogon helpers, IFEO injectors, and COM hijacks by correlating EDR, SIEM, and Sysmon data to validate hypotheses and document findings.

Registry Run Key Hunting

hunting-for-registry-run-key-persistence

mukul975/Anthropic-Cybersecurity-Skills

Hunts registry Run key persistence by parsing Sysmon Event ID 13 logs, flagging suspicious auto-start entries, correlating with process/file creation events, and building Sigma/Splunk rules.

Scheduled Task Persistence Hunt

hunting-for-scheduled-task-persistence

mukul975/Anthropic-Cybersecurity-Skills

Guide for threat hunters to detect adversary persistence by hunting Windows Scheduled Tasks, analyzing creation events, suspicious actions, and abnormal schedules across SIEM and EDR telemetry.

Startup Folder Persistence Hunt

hunting-for-startup-folder-persistence

mukul975/Anthropic-Cybersecurity-Skills

Detect T1547.001 startup folder persistence by scanning Windows startup directories, analyzing metadata via autoruns, and watching folders with Python watchdog to produce JSON reports and alerts for suspicious implants.

Suspicious Scheduled Task Hunt

hunting-for-suspicious-scheduled-tasks

mukul975/Anthropic-Cybersecurity-Skills

Detect and investigate suspicious Windows scheduled tasks by analyzing creation events, task properties, triggers, and execution correlations to expose persistence mechanisms, unusual activity, and MITRE T1053.005 abuse during proactive hunts or incident response.

Detect Unusual Windows Services

hunting-for-unusual-service-installations

mukul975/Anthropic-Cybersecurity-Skills

Hunt malicious Windows services by parsing System.evtx Event ID 7045 records, analyzing binary paths (temp folders, PowerShell/cmd patterns), flagging risky indicators, and mapping findings to MITRE ATT&CK T1543.003 for SOC reporting.

Osquery Endpoint Monitoring Setup

implementing-osquery-for-endpoint-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Automate the deployment of osquery scheduled queries to continuously monitor endpoints, covering process inventory, network listeners, file integrity, and persistence mechanisms; generate osquery.conf, configure differential logging, analyze suspicious results, and produce a security report.

Prev 1 2 3...20 21 222324 25 26...29 30 31 Next

Language