Download

Skill UI

Browse and discover 6034+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search SIEM , found 87 results

Default Newest Most Downloaded

Threat Intelligence Feed Integration

building-threat-intelligence-feed-integration

mukul975/Anthropic-Cybersecurity-Skills

Automates ingestion, normalization, scoring, and distribution of STIX/TAXII and open-source threat feeds so SOCs can match IOCs in real time across SIEM and detection tools.

Threat Intelligence Platform Build

building-threat-intelligence-platform

mukul975/Anthropic-Cybersecurity-Skills

Guides building a unified Threat Intelligence Platform by orchestrating CTI tools like MISP, OpenCTI, TheHive, Cortex, and shared storage/enrichment services via Docker Compose and API integrations.

Vulnerability Scanning Workflow

building-vulnerability-scanning-workflow

mukul975/Anthropic-Cybersecurity-Skills

Defines a structured vulnerability scanning workflow for SOC teams, covering Nessus/Qualys/OpenVAS scheduling, risk prioritization, and SIEM-ready remediation tracking dashboards.

Compromise Indicator Collector

collecting-indicators-of-compromise

mukul975/Anthropic-Cybersecurity-Skills

Systematically collects and enriches IOCs from SIEM logs, memory analysis, and malware reports, then translates them into STIX/TAXII for defensive systems and trusted partners to detect, block, and share threat intelligence.

Snort IDS Setup Guide

configuring-snort-ids-for-intrusion-detection

mukul975/Anthropic-Cybersecurity-Skills

Guides installing, configuring, and tuning Snort 3 to inspect traffic at critical boundaries using custom and community rules, DAQ, and alert outputs, helping security teams validate controls and feed SIEM platforms.

Suricata Network Monitoring Setup

configuring-suricata-for-network-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Configures Suricata IDS/IPS with Emerging Threats rules, AF_PACKET tuning, and EVE JSON logging to monitor high-speed networks, generate SIEM-ready alerts, and optionally block threats inline with custom rule management.

Windows Event Logging Detection

configuring-windows-event-logging-for-detection

mukul975/Anthropic-Cybersecurity-Skills

Configures Windows Advanced Audit Policy, command-line process logging, and event forwarding so SIEM detection and forensic workflows receive high-fidelity security events from endpoints.

QRadar Event Correlation

correlating-security-events-in-qradar

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC analysts and detection engineers through using IBM QRadar SIEM’s AQL queries, building blocks, reference sets, and correlation rules to link network, endpoint, and application logs for multi-stage attack detection and false-positive tuning.

Deploy CrowdStrike EDR

deploying-edr-agent-with-crowdstrike

mukul975/Anthropic-Cybersecurity-Skills

Automates deploying and configuring CrowdStrike Falcon EDR agents across Windows, macOS, and Linux endpoints, tuning prevention and response policies, and integrating Falcon telemetry with SIEMs to maintain real-time behavioral and threat detection coverage.

Deploy Osquery Endpoint Monitoring

deploying-osquery-for-endpoint-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying and configuring osquery agents across Windows, macOS, and Linux to gain SQL-based visibility into running processes, ports, installed software, and compliance state for fleet monitoring, threat hunting, and SIEM integration.

Detect API Enumeration Attacks

detecting-api-enumeration-attacks

mukul975/Anthropic-Cybersecurity-Skills

Detect and prevent API enumeration attacks such as BOLA and IDOR by monitoring sequential identifier access, mixed authorization failures, and abnormal request rates across gateways, SIEMs, and logs.

Credential Dumping Detection

detecting-credential-dumping-techniques

mukul975/Anthropic-Cybersecurity-Skills

Implements detection coverage for LSASS credential dumping by correlating Sysmon Event ID 10 ProcessAccess logs, Windows Security process creations, and SIEM rules to highlight reg.exe/ntdsutil/comsvcs abuses plus MITRE mapping such as T1003 for analyst triage.

Prev 123 4 5 6 7 8 Next

Language