Download

Skill UI

Browse and discover 5987+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Registry , found 25 results

Default Newest Most Downloaded

Shellbag Artifact Analysis

analyzing-windows-shellbag-artifacts

mukul975/Anthropic-Cybersecurity-Skills

Use SBECmd and ShellBags Explorer to parse Windows Shellbag registry artifacts, reconstruct folder browsing, detect removable media or network share access, and prove user interaction even after folders disappear.

Fileless Endpoint Detection

detecting-fileless-attacks-on-endpoints

mukul975/Anthropic-Cybersecurity-Skills

Detects fileless and in-memory attacks on endpoints by enabling Sysmon/PowerShell telemetry and hunting for PowerShell abuse, reflective injection, WMI persistence, and registry-resident tricks before malware touches disk.

Detecting Fileless Malware

detecting-fileless-malware-techniques

mukul975/Anthropic-Cybersecurity-Skills

Detects fileless malware in memory by analyzing PowerShell, WMI, registry-resident payloads, and LOLBin behaviors, guiding persistence, LOLBin abuse, and memory forensics investigations when no disk artifacts exist.

Elevation Control Abuse Detection

detecting-t1548-abuse-elevation-control-mechanism

mukul975/Anthropic-Cybersecurity-Skills

Detect T1548 elevation control abuse by monitoring UAC bypass registry tweaks, auto-elevating binaries, process integrity jumps, and Linux setuid/sudo misuse, enabling threat hunters to spot credential-free privilege escalation chains across Windows and Linux.

Windows Persistence Hunting

hunting-for-persistence-mechanisms-in-windows

mukul975/Anthropic-Cybersecurity-Skills

Guided workflow for hunting Windows persistence by enumerating registry, services, tasks, WMI, and startup entries, correlating artifacts with endpoint telemetry, and documenting findings for proactive defense.

Registry Persistence Hunt

hunting-for-registry-persistence-mechanisms

mukul975/Anthropic-Cybersecurity-Skills

Step-by-step guide for hunting registry-based persistence mechanisms with SIEM/EDR telemetry, covering Run keys, Winlogon, IFEO, and COM hijacking to validate threat intelligence and report findings.

Registry Run Key Hunting

hunting-for-registry-run-key-persistence

mukul975/Anthropic-Cybersecurity-Skills

Detects MITRE ATT&CK T1547.001 persistence by analyzing Sysmon Event ID 13 and related logs to spot malicious registry Run/RunOnce entries, unusual modifying processes, and builds Sigma/Splunk alerts for response.

OPA Gatekeeper Policy Enforcement

implementing-opa-gatekeeper-for-policy-enforcement

mukul975/Anthropic-Cybersecurity-Skills

Use OPA Gatekeeper to enforce Kubernetes admission policies through ConstraintTemplates, Rego rules, and the upstream policy library so workloads meet label, security, registry, and resource requirements before creation.

Malware IOC Extraction

performing-malware-ioc-extraction

mukul975/Anthropic-Cybersecurity-Skills

Extracts actionable malware indicators—from PE hashes to network, registry, and behavioral artifacts—using static/dynamic analysis, YARA scanning, and STIX 2.1 formatting for threat sharing.

Malware Persistence Analysis

performing-malware-persistence-investigation

mukul975/Anthropic-Cybersecurity-Skills

Systematically audit Windows and Linux autostart mechanisms, registry hives, scheduled tasks, and WMI entries to map how malware survives reboots and maintain access during incident response or threat hunting.

Memory Forensics with Volatility

performing-memory-forensics-with-volatility3

mukul975/Anthropic-Cybersecurity-Skills

Use Volatility 3 to inspect RAM dumps, list processes, network links, registry data, and credentials so investigators can spot hidden malware or injected code during incident response.

Container Registry Security

securing-container-registry-images

mukul975/Anthropic-Cybersecurity-Skills

Implements vulnerability scanning, SBOM generation, and signing workflows for container registry images using Trivy, Grype, Syft, Cosign and Sigstore, then gates CI/CD deployments and registry controls to block unverified artifacts.

Language