Download

Skill UI

Browse and discover 6044+ curated skills

All Development Artificial Intelligence Design & Creative Product & Business Data Science Marketing Soft Skills Productivity Engineering Languages

Search Security-Triage , found 12 results

Default Newest Most Downloaded

API Security Scanning

scanning-api-security

jeremylongshore/claude-code-plugins-plus-skills

Scans API implementations and configurations to detect OWASP API Security Top 10 issues, validate auth flows, rate limits, headers, and dependencies, and produce reports useful for CI gates or manual triage.

Ethereum Smart Contract Security

analyzing-ethereum-smart-contract-vulnerabilities

mukul975/Anthropic-Cybersecurity-Skills

Static and symbolic analysis of Solidity smart contracts via Slither and Mythril to spot reentrancy, overflow, access control, and other bugs before deploying to the Ethereum mainnet, plus triage and structured reporting of findings.

Network Incident Traffic Analysis

analyzing-network-traffic-for-incidents

mukul975/Anthropic-Cybersecurity-Skills

Analyzes PCAP captures, Zeek logs, and NetFlow flow data to uncover command-and-control, lateral movement, and exfiltration during security incidents; supports packet-level validation and IOC extraction for triage and response teams.

Splunk Threat Intelligence Enrichment

building-threat-intelligence-enrichment-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Automate threat intelligence enrichment in Splunk Enterprise Security by ingesting feeds through modular inputs, normalizing IOCs into KV Store collections, and correlating them via lookups to highlight contextual notables for SOC triage.

Phishing Incident Response

conducting-phishing-incident-response

mukul975/Anthropic-Cybersecurity-Skills

Guides security teams through phishing incident response, covering report triage, header and sandbox analysis, impact assessment, containment, and account recovery for compromised credentials.

Credential Dumping Detection

detecting-credential-dumping-techniques

mukul975/Anthropic-Cybersecurity-Skills

Implements detection coverage for LSASS credential dumping by correlating Sysmon Event ID 10 ProcessAccess logs, Windows Security process creations, and SIEM rules to highlight reg.exe/ntdsutil/comsvcs abuses plus MITRE mapping such as T1003 for analyst triage.

Elastic SIEM Alert Triage

performing-alert-triage-with-elastic-siem

mukul975/Anthropic-Cybersecurity-Skills

Outlines a structured workflow inside Elastic Security SIEM for SOC analysts to triage alerts, investigate related activity with ES|QL queries, enrich findings via threat intelligence, and document escalation steps so teams can prioritize real threats and reduce noise.

AFL++ Fuzzing Guide

performing-fuzzing-with-aflplusplus

mukul975/Anthropic-Cybersecurity-Skills

Covers using AFL++ instrumentation, corpus minimization, parallel fuzzing campaigns, and crash triage to uncover memory corruption and other security vulnerabilities in compiled binaries.

Shodan IP Reputation Analysis

performing-ip-reputation-analysis-with-shodan

mukul975/Anthropic-Cybersecurity-Skills

Use the Shodan API and InternetDB to enrich IP security alerts, inspect open ports/services, flag CVE-linked vulnerabilities, and score reputation for SOC triage and threat intelligence workflows.

Splunk Alert Triage Flow

triaging-security-alerts-in-splunk

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC Tier 1 analysts through Splunk ES Incident Review to classify alert severity, investigate notable events with SPL, correlate telemetry, and document disposition decisions before escalating or closing incidents.

Security Incident Triage Playbook

triaging-security-incident-with-ir-playbook

mukul975/Anthropic-Cybersecurity-Skills

Structured guide to triage security alerts by enriching data, classifying incident type, scoring severity, and launching the proper IR playbooks plus team notifications so SOC analysts resolve threats faster.

Security Incident Triage

triaging-security-incident

mukul975/Anthropic-Cybersecurity-Skills

Guides SOC analysts through initial triage of SIEM/EDR alerts using NIST SP 800-61r3 and SANS PICERL, classifying incidents, assessing severity via impact matrices, enriching with threat and asset context, and escalating to the right response team with containment steps.

1

Language