Download

Skill UI

Browse and discover 6044+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search SIEM , found 87 results

Default Newest Most Downloaded

Reducing SOC Alert Fatigue

implementing-alert-fatigue-reduction

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC teams through measuring alert quality, applying risk-based alerting, and tuning noisy SIEM rules so analysts stay effective and critical signals are not dismissed.

CloudTrail Log Analysis

implementing-cloud-trail-log-analysis

mukul975/Anthropic-Cybersecurity-Skills

Implements AWS CloudTrail log analysis with Athena, CloudWatch Logs Insights, and SIEM feeds to monitor API activity, detect privilege escalation, unauthorized access, and support forensic investigations across AWS environments.

Dragos OT Monitoring Deployment

implementing-dragos-platform-for-ot-monitoring

mukul975/Anthropic-Cybersecurity-Skills

Deploy and configure the Dragos Platform to monitor OT networks with industrial protocol parsing, intelligence-driven threat detection, asset visibility, and SIEM integration for ICS-focused SOCs.

Proofpoint Email Sandboxing

implementing-email-sandboxing-with-proofpoint

mukul975/Anthropic-Cybersecurity-Skills

Outlines configuring Proofpoint TAP so suspicious attachments and URLs are detonated in isolated sandboxes, with dashboard monitoring, policy tuning, and SIEM integration to stop phishing and zero-day payloads.

Wazuh Endpoint Detection

implementing-endpoint-detection-with-wazuh

mukul975/Anthropic-Cybersecurity-Skills

Guides security operators through deploying Wazuh SIEM/XDR, managing agents via the REST API, crafting custom decoders/rules in XML, querying alerts, and validating logic with logtest for automated endpoint detection.

Ransomware Honeypot Deployment

implementing-honeypot-for-ransomware-detection

mukul975/Anthropic-Cybersecurity-Skills

Deploys canary files, honeypot shares, and deception appliances to surface ransomware attempts before encryption, feeding PowerShell and SIEM alerts so responders can triage incidents triggered by high-confidence decoy activity.

Fluentd Log Forwarding

implementing-log-forwarding-with-fluentd

mukul975/Anthropic-Cybersecurity-Skills

Configure Fluentd and Fluent Bit to aggregate, enrich, and route distributed logs to Elasticsearch, S3, or Splunk while validating syntax and testing delivery for centralized observability and SIEM workflows.

MITRE ATT&CK Coverage Mapping

implementing-mitre-attack-coverage-mapping

mukul975/Anthropic-Cybersecurity-Skills

Provides SOC teams with a structured process to map detection rules to MITRE ATT&CK techniques, highlight gaps, score maturity, and prioritize rule development for better SIEM coverage.

Network Deception Honeypots

implementing-network-deception-with-honeypots

mukul975/Anthropic-Cybersecurity-Skills

Guides deploying and managing OpenCanary, Cowrie, and T-Pot honeypots to detect lateral movement, alert on unauthorized scanning, capture attacker commands, and feed SIEMs, with planning, configuration, monitoring, and maintenance steps.

CyberArk Privileged Access

implementing-privileged-access-management-with-cyberark

mukul975/Anthropic-Cybersecurity-Skills

Guides deployment of CyberArk Privileged Access Management to discover, vault, rotate, and monitor privileged credentials across enterprise systems, covering vault design, session isolation, credential lifecycle automation, and SIEM integration for continuous compliance.

Runtime Application Self-Protection

implementing-runtime-application-self-protection

mukul975/Anthropic-Cybersecurity-Skills

Deploy OpenRASP agents to instrument Java and Python apps at runtime, detect OWASP Top 10 patterns, tune policies, and forward alerts to SIEM for comprehensive threat response.

Tetragon Runtime Security

implementing-runtime-security-with-tetragon

mukul975/Anthropic-Cybersecurity-Skills

Implements eBPF-powered runtime security monitoring and enforcement for Kubernetes via Cilium Tetragon, covering tracing policies, enforcement actions, CLI workflows, and integrations to detect container escapes, sensitive file access, and crypto mining attempts.

Prev 1 2 3 456 7 8 Next

Language