Download

Skill UI

Browse and discover 5998+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search SPL , found 63 results

Default Newest Most Downloaded

Splunk Windows Threat Detection

analyzing-windows-event-logs-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Runs SPL queries against Windows Security, System, and Sysmon logs in Splunk to flag authentication attacks, privilege escalations, persistence, and lateral movement, helping SOC analysts, detection engineers, and responders build investigations and timelines.

Splunk SPL Detection Rules

building-detection-rule-with-splunk-spl

mukul975/Anthropic-Cybersecurity-Skills

Guide for building Splunk Search Processing Language correlation searches that identify SOC threats, enrich events, configure notable alerts, and close MITRE ATT&CK coverage gaps in Enterprise Security deployments.

Sigma Detection Rule Builder

building-detection-rules-with-sigma

mukul975/Anthropic-Cybersecurity-Skills

Creates portable Sigma detection rules from threat intelligence, validating syntax and converting to Splunk, Elastic, or Sentinel queries so SOC teams can map rules to MITRE ATT&CK and reuse them in CI/CD pipelines.

Live Incident Response Dashboard

building-incident-response-dashboard

mukul975/Anthropic-Cybersecurity-Skills

Creates real-time incident response dashboards in Splunk, Elastic, or Grafana so SOC teams track impacted assets, containment progress, IOC spread, and response timelines during active incidents.

Splunk Threat Intelligence Enrichment

building-threat-intelligence-enrichment-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Automate threat intelligence enrichment in Splunk Enterprise Security by ingesting feeds through modular inputs, normalizing IOCs into KV Store collections, and correlating them via lookups to highlight contextual notables for SOC triage.

Detect AWS IAM Escalation

detecting-aws-iam-privilege-escalation

mukul975/Anthropic-Cybersecurity-Skills

Analyzes AWS IAM policies via boto3 and Cloudsplaining-style logic to find privilege escalation paths, wildcard resources, and least-privilege violations, scoring risks and outputting JSON reports with remediation advice.

Detect Azure SP Abuse

detecting-azure-service-principal-abuse

mukul975/Anthropic-Cybersecurity-Skills

Guides defenders through detecting and investigating Azure service principal abuse—ranging from unauthorized credential additions and privileged role grants to admin consent bypass and OAuth escalation—using Sentinel/Splunk queries and Graph-powered investigation steps.

Kerberos Golden Ticket Detection

detecting-golden-ticket-attacks-in-kerberos-logs

mukul975/Anthropic-Cybersecurity-Skills

Analyze domain controller Kerberos logs to spot Golden Ticket TGT anomalies such as RC4 encryption, impossible lifetimes, missing TGT requests, and forged PAC signatures, letting SOC teams hunt credential abuse and persistent AD footholds with Splunk or KQL queries.

Golden Ticket Detection

detecting-golden-ticket-forgery

mukul975/Anthropic-Cybersecurity-Skills

Detect Kerberos Golden Ticket forgery by analyzing Windows Event IDs 4768/4769 for RC4 downgrades, ticket lifetime violations, and krbtgt anomalies across Splunk or Elastic SIEM, producing risk-scored JSON reports tied to MITRE ATT&CK mapping.

Splunk Lateral Movement Hunt

detecting-lateral-movement-with-splunk

mukul975/Anthropic-Cybersecurity-Skills

Guide to hunting adversary lateral movement with Splunk SPL against Windows authentication, SMB flow, and remote service abuse logs, helping SOCs detect unusual logon graphs, anomalous service accounts, and scripted propagation.

Detecting Pass-The-Ticket

detecting-pass-the-ticket-attacks

mukul975/Anthropic-Cybersecurity-Skills

Analyze Windows Event IDs 4768, 4769, and 4771 within Splunk or Elastic SIEM to identify anomalous Kerberos ticket usage, RC4 downgrades, and unusual service requests, enabling proactive Pass-the-Ticket threat detection.

SMB Exploitation Playbook

exploiting-smb-vulnerabilities-with-metasploit

mukul975/Anthropic-Cybersecurity-Skills

Guides authorized testers through SMB-focused assessments with Metasploit and complementary tools, covering enumeration, vulnerability scanning, EternalBlue exploitation, relay attacks, pass-the-hash lateral movement, and post-exploitation clean-up.

Prev 1 2 345 6 Next

Language