Download

Skill UI

Browse and discover 5970+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Ransomware , found 20 results

Default Newest Most Downloaded

Linux ELF Malware Analysis

analyzing-linux-elf-malware

mukul975/Anthropic-Cybersecurity-Skills

Analyzes Linux ELF malware—botnets, cryptominers, ransomware, and rootkits—on servers, containers, and clouds via static headers, dynamic tracing, and reverse engineering for x86_64 and ARM samples.

Ransomware Encryption Analysis

analyzing-ransomware-encryption-mechanisms

mukul975/Anthropic-Cybersecurity-Skills

Analyzes ransomware encryption algorithms, key management, and file routines to assess decryption feasibility, highlight weaknesses, and guide forensic recovery or decryptor development for known ransomware families.

Leak Site Intelligence

analyzing-ransomware-leak-site-intelligence

mukul975/Anthropic-Cybersecurity-Skills

Collects, parses, and charts ransomware leak site postings to track victim disclosures, group tactics, and sector risk so analysts can prioritize proactive defenses using public feeds and osint-safe collection practices.

Ransomware Network Detection

analyzing-ransomware-network-indicators

mukul975/Anthropic-Cybersecurity-Skills

Analyze Zeek conn.log or NetFlow data to detect ransomware beaconing, TOR exit node use, high outbound flows, and DNS anomalies, then score risks and map findings to MITRE ATT&CK for reporting.

Ransomware SOC Playbook

building-soc-playbook-for-ransomware

mukul975/Anthropic-Cybersecurity-Skills

Creates a structured SOC ransomware response playbook with detection queries, triage decision trees, containment APIs, and evidence collection tied to NIST SP 800-61 and MITRE ATT&CK so teams can rehearse consistent procedures.

Ransomware Canary Deployment

deploying-ransomware-canary-files

mukul975/Anthropic-Cybersecurity-Skills

Deploys Python watchdog monitors for deceptive canary files placed in critical directories, alerting via email/Slack/syslog whenever ransomware touches them so teams can respond before encryption.

Ransomware Network Precursors Detection

detecting-ransomware-precursors-in-network

mukul975/Anthropic-Cybersecurity-Skills

Identifies early-stage ransomware indicators in Zeek/Suricata/Arkime traffic, correlates with SIEM rules and threat feeds, and alerts on Cobalt Strike beacons, Mimikatz signatures, RDP brute-force and staging behaviors before encryption begins.

Shadow Copy Deletion Hunt

hunting-for-shadow-copy-deletion

mukul975/Anthropic-Cybersecurity-Skills

Workflow for detecting ransomware preparation and anti-forensics by hunting shadow copy deletion commands (vssadmin, WMIC, PowerShell) across EDR, SIEM, Sysmon, and threat intel to validate hypotheses and recommend containment.

Ransomware Honeypot Deployment

implementing-honeypot-for-ransomware-detection

mukul975/Anthropic-Cybersecurity-Skills

Deploys canary files, honeypot shares, and deception appliances to surface ransomware attempts before encryption, feeding PowerShell and SIEM alerts so responders can triage incidents triggered by high-confidence decoy activity.

Immutable Restic Backup

implementing-immutable-backup-with-restic

mukul975/Anthropic-Cybersecurity-Skills

Implements an immutable backup workflow with restic and Object Lock on S3-compatible storage, automating snapshot creation, integrity checks, retention enforcement, and restore validation for ransomware-resilient archives.

Implementing OT Incident Response

implementing-ot-incident-response-playbook

mukul975/Anthropic-Cybersecurity-Skills

Creates OT-specific incident response playbooks aligned with SANS PICERL, IEC 62443, and NIST SP 800-82 to coordinate IT SOC, OT engineers, and plant ops during ICS ransomware or safety incidents.

Ransomware Resilient Backup Strategy

implementing-ransomware-backup-strategy

mukul975/Anthropic-Cybersecurity-Skills

Designs ransomware-resilient backup programs following the 3-2-1-1-0 methodology, aligning schedules with RPO/RTO tiers, isolating credentials, and automating restore testing for disaster-ready operations.

Language